CVE-2025-0813

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Automation System User Interface (EPAS-UI) (affected versions not specified)

Description: The issue is related to insufficient authentication procedure in the EcoStruxure Power Automation System User Interface (EPAS-UI), which could allow an attacker to impact the confidentiality, integrity, and availability of protected information. An unauthorized user with physical access to the EPAS-UI computer may be able to bypass authentication by rebooting the workstation and interrupting the normal boot process.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.