Unauthorized Access to Project File via Hard-coded Credentials

CVE-2023-6409

Summary

A vulnerability exists in EcoStruxure Control Expert that involves the use of hard-coded credentials, leading to potential unauthorized access to projects secured by application passwords. This flaw allows attackers who exploit it to gain access to sensitive project files, compromising the overall security of the application and the integrity of the affected projects. It is crucial for users to evaluate their security measures and implement necessary updates to mitigate potential risks associated with this vulnerability.

References