View CSAF

Summary

Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality.

The following versions of Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) are affected:

Ecostruxure™ Machine Expert HVAC vers<1.10.0

CVSS Vendor Equipment Vulnerabilities

v3 5.5 Schneider Electric Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01) Cleartext Storage of Sensitive Information

Background

Critical Infrastructure Sectors: Chemical, Critical Manufacturing, Energy, Water and Wastewater

Countries/Areas Deployed: Worldwide

Company Headquarters Location:…