CVE-2023-6409 | Schneider Electric EcoStruxure Control Expert Project File hard-coded credentials (SEVD-2024-044-01)

A vulnerability classified as critical was found in Schneider Electric EcoStruxure Control Expert and EcoStruxure Process Expert. Affected by this vulnerability is an unknown functionality of the component Project File Handler. The manipulation leads to hard-coded credentials.

This vulnerability is known as CVE-2023-6409. The attack needs to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.