Description
Schneider Electric StruxureWare Building Expert MPM before 2.15 does not use encryption for the client-server data stream, which allows remote attackers to discover credentials by sniffing the network.
Advisories 2
- ICSA-15-167-01 Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability CISA ICS & IT advisories · Jun 6, 2025
- ICSA-15-258-01 Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability CISA ICS & IT advisories · Jun 5, 2025