CVE Explorer
CVE-2026-6332
CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that could cause the disclosure of a sensitive information which could result in revealing protected source code and loss of confidentiality, When an authorized attacker accesses the source code for editing or compiling it.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"Ecostruxure™ Machine Expert HVAC","vendor":"Schneider Electric","versions":[{"status":"affected","version":"Versions prior to 1.10.0"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:4e78cc275e0baabd0d26c42f1d18f66d46608dae9ac03b778d332e35fd25edf7 · sha256:b05aa29e41a24bea… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"H…
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:4e78cc275e0baabd0d26c42f1d18f66d46608dae9ac03b778d332e35fd25edf7 · sha256:b05aa29e41a24bea… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-312","description":"CWE-312 Cleartext storage of sensitive information","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:4e78cc275e0baabd0d26c42f1d18f66d46608dae9ac03b778d332e35fd25edf7 · sha256:b05aa29e41a24bea… · /containers/cna/problemTypes/0/descriptions/0
Source references
1 source assertion{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2026-132-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-132-01.pdf"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:4e78cc275e0baabd0d26c42f1d18f66d46608dae9ac03b778d332e35fd25edf7 · sha256:b05aa29e41a24bea… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.