CVE-2026-6332: Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6332?
CVE-2026-6332 is considered a high-severity vulnerability due to the potential disclosure of sensitive information.
How do I fix CVE-2026-6332?
To mitigate CVE-2026-6332, ensure that sensitive information is stored securely using encryption methods.
What types of information are exposed in CVE-2026-6332?
CVE-2026-6332 could expose protected source code and other sensitive information stored in clear text.
Which software is affected by CVE-2026-6332?
CVE-2026-6332 affects Schneider Electric EcoStruxure Machine Expert HVAC software.
What are the consequences of CVE-2026-6332 if exploited?
Exploitation of CVE-2026-6332 may lead to loss of confidentiality and unauthorized access to critical source code.