IM
IronMonkey Threat Research
‹ Back to ICS Advisories

EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime (V2.0)

HIGH
CVSS 7.4
Date 2026-10-16T20:41:12+00:00
Source schneider-electric
Published by Schneider Electric

// Description

Schneider Electric Security Notification 10-Nov-20 (12-Jan-21) Document Reference Number – SEVD-2020 -315-02 V2.0 Page 1 of 4 ## EcoStruxure™ Operator Terminal Expert (Vijeo XD), Pro-face BLUE and WinGP runtime (V2.0) 10 November 2020 (12 January 2021) # Overview Schneider Electric is aware of a vulnerability in its EcoStruxure™ Operator Terminal Expert (formerly known as Vijeo XD), Pro-face BLUE and WinGP runtimes. This vulnerability impacts Windows PC and Harmony iPC offers. The EcoStruxure™ Operator Terminal Expert and Pro-face BLUE products are HMI configuration software supporting gestures and UI designs. WinGP is a runtime engine on Windows PC and is included in Pro-face GP-Pro EX product which is an HMI Screen Editor & Logic Programming Software for Pro-face. Failure to apply the remediations provided below may risk unauthorized command execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality and integrity of the workstation where EcoStruxure™ Operator Terminal Expert , Pro-face BLUE or WinGP runtime is installed. January 2021 update: Added Pro-face BLUE and WinGP to the list of products affected and links to the fixes # Affected Product and Version EcoStruxure™ Operator Terminal Expert Runtime 3.1 Service Pack 1A and prior installed on: • Windows PC using legacy BIOS • Harmony iPC(HMIG3U) using legacy BIOS Pro-face BLUE Runtime 3.1 Service Pack 1A and prior installed on: • Windows PC using legacy BIOS • Pro-face iPC (SP-5B10) using legacy BIOS WinGP V4.09.120 and prior installed on: • Windows PC using legacy BIOS • Pro-face PS4000 & PS5000 series and SP-5B40, SP5B41 using legacy BIOS Note : Windows PC using UEFI are not impacted by this vulnerability. Schneider Electric Security Notification 10-Nov-20 (12-Jan-21) Document Reference Number – SEVD-2020 -315-02 V2.0 Page 2 of 4 # Vulnerability Details CVE ID: CVE-2020-7544

// Vulnerabilities (1)

CVE ID CVSS Score Severity Description
CVE-2020-7544 7.4 high
An improper privilege management vulnerability exists that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxure Operator Terminal Expert.CVE-2020-7544 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

// Affected Products (2)

Vendor Product Asset Type Purdue Level Firmware
Schneider Electric Software, LLC Schneider Electric Software, LLC Harmony iPC (HMIG5U HMIG5U2) using legacy BIOS EcoStruxure Operator Terminal Expert Runtime hmi
L2
--
Schneider Electric Software, LLC Schneider Electric Software, LLC Windows PC using legacy BIOS EcoStruxure Operator Terminal Expert Runtime engineering_workstation
L3
--

// Remediations (6)

Mitigation: Schneider Electric has prepared Version 3.1 Service Pack 1B of the EcoStruxure Operator Terminal Exp
Schneider Electric has prepared Version 3.1 Service Pack 1B of the EcoStruxure Operator Terminal Expert product with a fix for this vulnerability. This fix is also available through Schneider Electric Software Update (SESU). If users choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:
Mitigation: Use Windows PC with UEFI technology. Users can identify if their PC uses the UEFI technology by usin
Use Windows PC with UEFI technology. Users can identify if their PC uses the UEFI technology by using the following system command: msinfo32.exe provided by Microsoft Windows. This command provides the system information. The section BIOS mode displays either “UEFI” or “LEGACY”. If the value is UEFI, the PC is not vulnerable, if the value is LEGACY then the PC is vulnerable.
Mitigation: If the value is UEFI, the PC is not vulnerable, if the value is LEGACY then the PC is vulnerable.
If the value is UEFI, the PC is not vulnerable, if the value is LEGACY then the PC is vulnerable.
Mitigation: Use EcoStruxure Operator Terminal Expert runtime software only on a trusted workstation.
Use EcoStruxure Operator Terminal Expert runtime software only on a trusted workstation.
Mitigation: For further information please refer to SEVD-2020-315-02.
For further information please refer to SEVD-2020-315-02.
Mitigation: Harden workstation following the best cybersecurity practices (antivirus, updated operating systems,
Harden workstation following the best cybersecurity practices (antivirus, updated operating systems, strong password policies, application white listing software, etc.) by following Schneider Electric's best practices guidelines.

// References