CVE-2020-7475

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...

CVE-2020-7475

The CVE-2020-7475 issue affects Schneider Electric control software and PLCs: EcoStruxure Control Expert (Unity Pro) and related tools are vulnerable when running versions prior to 14.1 Hot Fix; Modicon M340 prior to V3.20; Modicon M580 prior to V3.10. The flaw is CWE-74 (Injection) due to improp...

The vulnerability in HMI/SCADA Equinox Control Expert, related to the failure to protect the SQL query structure, allows a intruder to gain unauthorized access to protected information.

The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...

Schneider Electric EcoStruxure Control Expert and Unity Pro License Issue Vulnerability

Schneider Electric EcoStruxure Control Expert formerly Unity Pro and Unity Pro are both products of Schneider Electric, France. Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric's logic controller products, while Unity Pro is a general purpose...

CVE-2019-6855

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...

CVE-2019-6855

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...

Authorization

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...

CVE-2019-6855

Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...

CVE-2019-6855

CVE-2019-6855 affects Schneider Electric EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) and Modicon M580 (all versions prior to V3.10). The vulnerability is an Incorrect Authorization issue that could cause a b...

CVE-2019-18234

Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code...

Sql injection

Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code...

CVE-2019-18234

CVE-2019-18234 affects Equinox Control Expert (all versions). The Red Hat/NVD/NVD-origin sources confirm an SQL injection vulnerability in Control Expert that can lead to remote arbitrary code execution. CVSS v3 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Public exploitation details ...

CVE-2019-18234

Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code...

Equinox Control Expert SQL Injection Vulnerability

Equinox Control Expert is a human interface and data acquisition and monitoring system from Equinox Argentina. A SQL injection vulnerability exists in Equinox Control Expert. The vulnerability stems from a lack of validation of externally entered SQL statements in a database-based application. A...

Equinox Control Expert

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Equinox Equipment: Control Expert Vulnerability: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' 2. RISK EVALUATION Successful exploitation of this vulnerability...

Equinox Control Expert CVE-2019-18234 SQL Injection Vulnerability

Description Equinox Control Expert is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...