Description
CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to compromise of managed devices, when a local privileged attacker leverages weaknesses in the handling and protection of stored credentials within the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ Cybersecurity Admin Expert | v4.2.0 and prior | — |
Advisories 1
- SEVD-2026-195-02 Insufficiently Protected Credentials vulnerability on EcoStruxure™ Cybersecurity Admin Expert Schneider Electric CPCERT · Jul 14, 2026