CVE-2025-13905 | Schneider Electric EcoStruxure Process Expert default permission (SEVD-2026-013-02)

A vulnerability was found in Schneider Electric EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System Platform. It has been rated as critical. This issue affects some unknown processing. Performing a manipulation results in incorrect default permissions.

This vulnerability was named CVE-2025-13905. The attack needs to be approached locally. There is no available exploit.

Upgrading the affected component is advised.