CVE-2023-6408

CWE-924: Improper Enforcement of Message Integrity During Transmission in aCommunication Channel vulnerability exists that could cause a denial of service and loss ofconfidentiality, integrity of controllers when conducting a Man in the Middle attack.

CVE-2023-6409

CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorizedaccess to a project file protected with application password when opening the file withEcoStruxure Control Expert.

CVE-2023-27975

CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorizedaccess to the project file in EcoStruxure Control Expert when a local user tampers with thememory of the engineering workstation.