Description
CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized
access to the project file in EcoStruxure Control Expert when a local user tampers with the
memory of the engineering workstation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure Control Expert | Versions prior to v16.0 | — |
| Schneider Electric | EcoStruxure Process Expert | Versions prior to v2023 | — |
Advisories 2
- SEVD-2024-044-01 EcoStruxure™ Control Expert, EcoStruxure™ Process Expert and Modicon M340, M580 and M580 Safety PLCs Schneider Electric CPCERT · Sep 8, 2026
- ICSA-24-331-03 Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs CISA ICS & IT advisories · May 7, 2026