Schneider-electric

Ecostruxure Control Expert

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-7538

  • EPSS 0.46%
  • Veröffentlicht 19.11.2020 22:15:14
  • Zuletzt bearbeitet 21.11.2024 05:37:20

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert s...

8.8

CVE-2020-28213

  • EPSS 0.35%
  • Veröffentlicht 19.11.2020 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:22:29

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbu...

9.8

CVE-2020-28212

  • EPSS 1.56%
  • Veröffentlicht 19.11.2020 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:22:29

A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done...

7.8

CVE-2020-28211

  • EPSS 0.06%
  • Veröffentlicht 19.11.2020 22:15:13
  • Zuletzt bearbeitet 21.11.2024 05:22:28

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.

9.8

CVE-2020-7475

  • EPSS 0.57%
  • Veröffentlicht 23.03.2020 19:15:12
  • Zuletzt bearbeitet 21.11.2024 05:37:13

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M...

7.5

CVE-2019-6855

  • EPSS 0.19%
  • Veröffentlicht 06.01.2020 23:15:11
  • Zuletzt bearbeitet 21.11.2024 04:47:17

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause ...