Improper Authentication in Schneider Electric's EPAS-UI Workstation

CVE-2025-0813

What is CVE-2025-0813?

An improper authentication vulnerability has been identified in Schneider Electric's EPAS-UI product. This vulnerability can be exploited when an unauthorized user obtains physical access to the EPAS-UI workstation. By rebooting the workstation and interrupting the normal boot process, the malicious actor may bypass authentication mechanisms, potentially allowing them unauthorized access to sensitive information and operational controls. Organizations utilizing the EPAS-UI should implement strict physical security measures to safeguard against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References