Schneider-Electric: >> Ecostruxure Automation Expert Security Vulnerabilities
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.
CVSS Score
7.2
EPSS Score
0.002
Published
2026-03-10