# Schneider Electric Uni-Telway Driver DoS flaw across products

Published: 2026-02-24 · Severity: routine · Sectors: energy, manufacturing, infrastructure
Canonical: https://vorant.io/reports/1362a10a-bad0-5d6e-8fda-f841c6ada395/schneider-electric-uni-telway-driver-dos-flaw-across-products

> Improper input validation in Schneider Electric Uni-Telway driver affects multiple EcoStruxure products; authenticated local users can cause denial of service.

Schneider Electric has disclosed CVE-2024-10083, an improper input validation vulnerability (CWE-20) in its Uni-Telway driver component that affects multiple engineering and automation products. The vulnerability allows an authenticated user with local access to invoke specific driver interfaces with crafted input, causing denial of service of the engineering workstation and potentially interrupting engineering operations. The issue affects all versions of Uni-Telway driver as deployed in EcoStruxure Control Expert, EcoStruxure Process Expert, EcoStruxure Process Expert for AVEVA System Platform, and OPC Factory Server across critical infrastructure sectors including commercial facilities, critical manufacturing, and energy worldwide.

Since the vulnerability requires local authentication and direct workstation access, the risk is primarily to engineering operations and authorized personnel. No remote exploitation vector is documented. Schneider Electric recommends uninstalling the driver where not required; newer versions (16.2 of Control Expert, 2025 of Process Expert, and 3.63SP3 of OPC Factory Server) no longer include Uni-Telway by default. For those requiring the driver, mitigations include application control via McAfee tools and adherence to Schneider Electric's cybersecurity hardening guidelines. As of January 2026, mitigations for EcoStruxure Process Expert are now available.

## Mentioned in this report

- Vulnerabilities: CVE-2024-10083

Source reporting: https://www.cisa.gov/news-events/ics-advisories/icsa-25-070-01

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/1362a10a-bad0-5d6e-8fda-f841c6ada395/schneider-electric-uni-telway-driver-dos-flaw-across-products.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup