Description
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause information disclosure and remote code execution when SOCKS Proxy is enabled, and administrator credentials and PostgreSQL database credentials are known. SOCKS Proxy is disabled by default.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | v9.0 and prior | — |
Advisories 2
- ICSA-26-076-03 Schneider Electric EcoStruxure Data Center Expert CISA ICS & IT advisories · Mar 17, 2026
- SEVD-2026-069-05 Use of Hard-coded Credentials vulnerability in EcoStruxure™ IT Data Center Expert Schneider Electric CPCERT · Mar 10, 2026