Skip to content
OpenAdvisories
Medium SEVD-2026-132-01 1 CVE

Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC

Published May 12, 2026 · Updated May 12, 2026

Vendor: Schneider Electric Product: Ecostruxure™ Machine Expert HVAC

Summary

Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product.
The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic
controllers.
Failure to apply the remediation provided below may risk in revealing sensitive information, which could result
in disclosing protected source code, leading to loss of confidentiality.

Vulnerabilities 1

  • Medium 6.8
    CVE-2026-6332

    Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

    CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the sou…

    Schneider Electric Ecostruxure™ Machine Expert HVAC ICS / OT

Revision history

  1. #1.0.0

    Original Release

References