Vulnerability Details CVE-2023-6409
CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized
access to a project file protected with application password when opening the file with
EcoStruxure Control Expert.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 7.7
References
Products affected by CVE-2023-6409
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:-
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.0
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:14.1
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.0
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.1
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.2
-
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:15.3
-
cpe:2.3:a:schneider-electric:ecostruxure_process_expert:-
-
cpe:2.3:a:schneider-electric:ecostruxure_process_expert:2020
-
cpe:2.3:a:schneider-electric:ecostruxure_process_expert:2021