Skip to content
OpenAdvisories
Medium ICSA-26-148-07 1 CVE

Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)

Published May 12, 2026 · Updated May 20, 2026 · Revision 2

Vendor: Schneider Electric Product: Ecostruxure™ Machine Expert HVAC

Summary

Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product.
The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic
controllers.
Failure to apply the remediation provided below may risk in revealing sensitive information, which could result
in disclosing protected source code, leading to loss of confidentiality.

Vulnerabilities 1

  • Medium 6.8
    CVE-2026-6332

    Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

    CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the sou…

    Schneider Electric Ecostruxure™ Machine Expert HVAC ICS / OT

Revision history

  1. #2

    Initial CISA Republication of Schneider Electric CPCERT SEVD-2026-132-01 advisory

  2. #1

    Original Release

References