Improper Authentication in Schneider Electric's EPAS-UI Workstation

CVE-2025-0813

What is CVE-2025-0813?

An improper authentication vulnerability has been identified in Schneider Electric's EPAS-UI product. This vulnerability can be exploited when an unauthorized user obtains physical access to the EPAS-UI workstation. By rebooting the workstation and interrupting the normal boot process, the malicious actor may bypass authentication mechanisms, potentially allowing them unauthorized access to sensitive information and operational controls. Organizations utilizing the EPAS-UI should implement strict physical security measures to safeguard against unauthorized access.

References