CVE-2026-2273
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.
- Score
- CVSS 3.1 8.2 High
- Status
- Analyzed - cybersecurity@se.com
- Published
- 2026-03-10
- Last modified
- 2026-03-10
- Weaknesses
- CWE-94
Affected products
- Ecostruxure Automation Expert (Schneider-electric)
- Ecostruxure Automation Expert (Schneider Electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-069-04&p_enDocType=Security+and+Safety+Notice&p_File_…
