← Database

CVE-2026-2273

HIGH CVSS: 8.2 Published: 2026-03-10 Modified: 2026-06-23

Description

CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.

Affected Platforms

Schneider-Electric Ecostruxure Automation Expert

Weakness Type

CWE-94

References