CVE-2016-8354: Improper Control of Generation of Code

An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity...

PT-2017-9632

Name of the Vulnerable Software and Affected Versions Schneider Electric Unity PRO versions prior to V11.1 Description An issue was discovered where Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequent...

Major Security Vulnerability Found In Schneider Electric ICS Gear

Schneider Electric is grappling with a critical vulnerability found in its flagship industrial controller management software called Unity Pro that allows hackers to remotely execute code on industrial networks. The warning comes from Indegy, an industrial cybersecurity firm. Indegy discovered th...