EM
Product
Ecostruxure™ Machine Expert HVAC
by Schneider Electric · last CVE May 14, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
VulnerabilityMedium
Schnieider Electric EcoStruxure Machine Expert HVAC
View CSAF Summary Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality. The following versions of Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) are affected: Ecostruxure™ Machine Expert HVAC vers<1.10.0 CVSS Vendor Equipment Vulnerabilities v3 5.5 Schneider Electric Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) Cleartext Storage of Sensitive Information Background Critical Infrastructure Sectors: Chemical, Critical Manufacturing, Energy, Water and Wastewater Countries/Areas Deployed: Worldwide Company Headquarters Location: France Vulnerabilities Expand All + CVE-2026-6332 CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, when an authorized attacker accesses the source code for editing or compiling it. View CVE Details Affected Products Schnieider Electric EcoS...
May 28, 2026·CISA Advisories