Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-6332US | high7.5OT erhöht | — | ||
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected sourc… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC - SEVD-2026-132-01 PDF Versionself
- Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC - SEVD-2026-132-01 CSAF Versionself
- ICS Advisory ICSA-26-148-07 JSONself
- ICS Advisory ICSA-26-148-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (1)
- BehobenEcostruxure™ Machine Expert HVAC
Version 1.10.0 of Ecostruxure™ Machine Expert HVAC includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC_1_10_0/
https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC_1_10_0/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan