CVSS 4.0
7.2 highCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:L/VI:H/VA:L/SC:H/SI:H/SA:HCVE-2026-2273
High (7.2) in schneider-electric ecostruxure automation expert. EPSS 0.2% chance of exploitation in the next 30 days.
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.
Severity
CVSS 3.1
8.2 highCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWE
- CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:ecostruxure_automation_expert