EcoStruxure Machine Expert – HVAC vulnerabilities

2 known vulnerabilities in EcoStruxure Machine Expert – HVAC from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Ecostruxure™ Machine Expert HVAC: Cleartext Storage of Sensitive Information

  CVE-2026-6332May 14, 2026Schneider Electric

  CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the sour

• 7.5 High severity

  SoMachine HVAC: Out-of-bounds Write

  CVE-2022-2988Jan 30, 2023Schneider Electric

  A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – H