Unauthorized write access via crafted project file

Argument injection in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior allows remote attackers to gain unauthorized write access via a crafted project file. The project-file opening workflow passes attacker-controlled arguments into a write operation without adequate validation, allowing modification of files when a victim opens the file. Exploitation requires user interaction on a Windows workstation; the documented consequence is unauthorized integrity-impacting writes rather than demonstrated confidentiality loss or service interruption.