High severity7.7NVD Advisory· Published Feb 14, 2024· Updated Jun 17, 2026

CVE-2023-6409

Description

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when opening the file with EcoStruxure Control Expert.

Affected products

Schneider Electric/Ecostruxure Control Expertllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Versions prior to v16.0
Schneider Electric/Ecostruxure Process Expertcpe-rescue
Range: Versions prior to v2023

Patches

Vulnerability mechanics

References

download.schneider-electric.com/filesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000