EM
Product
Ecostruxure™ Machine Expert HVAC
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
VulnerabilityMedium
Schnieider Electric EcoStruxure Machine Expert HVAC
View CSAF
Summary
Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality.
The following versions of Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) are affected:
Ecostruxure™ Machine Expert HVAC vers<1.10.0
CVSS
Vendor
Equipment
Vulnerabilities
v3 5.5
Schneider Electric
Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
Cleartext Storage of Sensitive Information
Background
Critical Infrastructure Sectors: Chemical, Critical Manufacturing, Energy, Water and Wastewater
Countries/Areas Deployed: Worldwide
Company Headquarters Location: France
Vulnerabilities
Expand All +
CVE-2026-6332
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, when an authorized attacker accesses the source code for editing or compiling it.
View CVE Details
Affected Products
Schnieider Electric EcoS...
May 28, 2026·CISA Advisories
