Lucene search
SchneiderCVELIST:CVE-2020-28212HistoryNov 19, 2020 - 9:03 p.m.
CVE-2020-28212
2020-11-1921:03:43
CWE-307
schneider
www.cve.org
6
cwe-307
improper restriction
excessive authentication attempts
plc simulator
ecostruxure control expert
unity pro
modbus
unauthorized command execution
brute force attack
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.
CNA Affected
[
{
"product": "PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) ",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)"
}
]
}
]Related
prion
prion
Authentication flaw
2020-11-19 22:15:00
nvd
nvd
CVE-2020-28212
2020-11-19 22:15:13
cve
cve
CVE-2020-28212
2020-11-19 22:15:13
securelist
securelist
The secrets of Schneider Electric’s UMAS protocol
2022-09-29 08:00:53