Vulnerability in Schneider Electric Ecostruxure™ Process Expert

CVE-2025-13905

CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable service binaries are modified in the installation folder by a local user with normal privilege upon service restart.

EPSS: 0.001 (1.2th percentile) — read the EPSS interpretation.