Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-6332US | high7.5OT elevated | — | ||
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected sourc… | ||||
references
External citations — patches, advisories, analysis.
- Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC - SEVD-2026-132-01 PDF Versionself
- Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC - SEVD-2026-132-01 CSAF Versionself
- ICS Advisory ICSA-26-148-07 JSONself
- ICS Advisory ICSA-26-148-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (1)
- FixedEcostruxure™ Machine Expert HVAC
Version 1.10.0 of Ecostruxure™ Machine Expert HVAC includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC_1_10_0/
https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC_1_10_0/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan