EcoStruxure Control Expert Buffer Overflow Vulnerability Security Notification

This document details a medium-severity buffer overflow vulnerability (CVE-2022-37302) in Schneider Electric's EcoStruxure Control Expert software (versions V15.1 HF001 and prior) that can cause the software to crash when an incorrect project file is opened. It provides remediation steps, including upgrading to version V15.2, and outlines mitigations such as enabling file encryption, restricting project file access, and following general cybersecurity best practices.