EcoStruxure Process Expert Security Notification – CVE-2025-0327

This document details a high-severity local privilege escalation vulnerability (CVE-2025-0327) in EcoStruxure Process Expert and EcoStruxure Process Expert for AVEVA System Platform, which could lead to loss of confidentiality, integrity, and availability of the engineering workstation. It provides remediation steps, including a software fix for version 2023 (v4.8.0.5715), and mitigations such as restricting service control permissions and using application whitelisting.