Schneider-Electric Ecostruxure Machine Expert Hvac vulnerabilities

CVE-2026-6332 [HIGH] CWE-312 CVE-2026-6332: CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclo CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.

CVE-2022-2988 [HIGH] CWE-787 CVE-2022-2988: A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage w A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)