Lucene search
SchneiderCVELIST:CVE-2021-22782HistoryJul 14, 2021 - 2:26 p.m.
CVE-2021-22782
2021-07-1414:26:56
CWE-311
schneider
www.cve.org
6
ecostruxure control expert
ecostruxure process expert
scadapack remoteconnect
information leak
disclosure of network and process information
credentials
intellectual property
project file access
Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause an information leak allowing disclosure of network and process information, credentials or intellectual property when an attacker can access a project file.
CNA Affected
[
{
"product": "EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions"
}
]
}
]Related
nvd
nvd
CVE-2021-22782
2021-07-14 15:15:08
prion
prion
Information disclosure
2021-07-14 15:15:00
cve
cve
CVE-2021-22782
2021-07-14 15:15:08
ics
ics
Schneider Electric Modicon Controllers and Software (Update A)
2021-07-27 12:00:00