CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 22:36.

Filters

1 active

Reset filters

Search: SEVD-2026-132-01

Vendor

Protocol

Sector

Severity

Source

1 advisories found

SEVD-2026-132-01

Clear Text Storage of Sensitive Information vulnerability on EcoStruxure™ Machine Expert HVAC

Schneider Electric — Ecostruxure™ Machine Expert HVAC

Schneider Electric CPCERTmiddel

Published

12 May 2026

Last update

12 May 2026

Linked CVEs

CVE-2026-6332

Affected sectors

Risk evaluation

Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality.

Mitigation summary

Version 1.10.0 of Ecostruxure™ Machine Expert HVAC includes a fix for this vulnerability and is available for download here: https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC_1_10_0/

Revision history (1)

Initial publication — 12 May 2026
Original Release

Official source: Schneider Electric CPCERT