Description
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Ecostruxure™ Machine Expert HVAC | Versions prior to 1.10.0 | — |
Advisories 2
- ICSA-26-148-07 Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) CISA ICS & IT advisories · May 20, 2026
- SEVD-2026-132-01 Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC Schneider Electric CPCERT · May 12, 2026