Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-27975

CVE-2023-27975

Description

CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric EcoStruxure Control Expert

Default version status: unaffected

  • Versions prior to v16.0affected

Schneider Electric EcoStruxure Process Expert

Default version status: unaffected

  • Versions prior to v2023affected

References