CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when a local user tampers with the memory of the engineering workstation.
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ecostruxure_control_expert | Schneider-electric | * | 16.0 (excluding) |
| Ecostruxure_process_expert | Schneider-electric | * | 2023 (excluding) |