Skip to content
OpenAdvisories
High · 7.7 CVE-2023-6409 EUVD-2023-58646GHSA-57mc-gf87-2j5v

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with applicati…

Published Feb 14, 2024 · Updated May 12, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Control Expert Product: EcoStruxure™ Process Expert Category: ICS / OT

Description

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Control Expert Versions prior to v16.0 —
Schneider Electric EcoStruxure Process Expert Versions prior to v2023 —

Advisories 2

References