High severity8.8NVD Advisory· Published Apr 18, 2023· Updated Jun 17, 2026

CVE-2023-27976

Description

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Affected products

EcoStruxure/Control Expertllm-create
Range: >=V15.1
Schneider Electric/Ecostruxure Control Expertllm-fuzzy2 versions
>=V15.1+ 1 more
- (no CPE)range: >=V15.1
- (no CPE)range: V15.1 and above

Patches

Vulnerability mechanics

References

download.schneider-electric.com/filesnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000