CVE-2026-6332 — Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC

CVE-2026-6332

Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC PUBLISHED

Description (CNA)

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Ecostruxure™ Machine Expert HVAC	affected Versions prior to 1.10.0

CWE

CWE-312

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.