PT-2026-40980 · Schneider Electric · Ecostruxure Machine Expert

Published 2026-05-11 · Updated 2026-05-27 · CVE-2026-6332

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ecostruxure Machine Expert HVAC (affected versions not specified)

Description A cleartext storage of sensitive information issue exists. This occurs when an authorized attacker accesses the source code for editing or compiling, which could lead to the disclosure of protected source code and a loss of confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2026-06831

CVE-2026-6332

Affected Products

Ecostruxure Machine Expert

References · 4

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-01.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-6332 · Security Note
• https://bdu.fstec.ru/vul/2026-06831 · Security Note
• https://t.me/cveNotify/164925 · Telegram Post