Schneider Electric Ecostruxure Machine Expert Hvac vulnerabilities
2 known vulnerabilities affecting schneider_electric/ecostruxure_machine_expert_hvac.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2
Vulnerabilities
Page 1 of 1
CVE-2026-6332P3HIGHCVSS 7.5vVersions prior to 1.10.02026-05-14
CVE-2026-6332 [HIGH] CWE-312 CVE-2026-6332: CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclo
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.
nvd
CVE-2022-2988P3HIGHCVSS 7.5≥ All, < V1.4.02023-01-30
CVE-2022-2988 [HIGH] CWE-787 CVE-2022-2988: A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage w
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)
nvd