327 matches found
Denial of Service Vulnerability in Control Expert
Control Expert formerly known as Unity Pro is a PLC configuration software from Schneider, through which you can complete the PLC program writing as well as down loading operations. A denial of service vulnerability exists in Control Expert, which can be exploited by an attacker to cause a denial...
Injection Vulnerability in Multiple Schneider Electric Products
The Schneider Electric Modicon M580 is a programmable automation controller from Schneider Electric, France.The Schneider Electric Modicon M340 is a medium range PLC programmable logic controller for industrial processes and infrastructure. Schneider Electric Modicon M580 is a programmable...
CVE-2020-7475
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...
Design/Logic Flaw
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...
CVE-2020-7475
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...
CVE-2020-7475
The CVE-2020-7475 issue affects Schneider Electric control software and PLCs: EcoStruxure Control Expert (Unity Pro) and related tools are vulnerable when running versions prior to 14.1 Hot Fix; Modicon M340 prior to V3.20; Modicon M580 prior to V3.10. The flaw is CWE-74 (Injection) due to improp...
CVE-2020-7475
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...
CVE-2020-7475: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', reflective DLL, vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20, Modicon M580 all...
PT-2020-6280
Name of the Vulnerable Software and Affected Versions EcoStruxure Control Expert versions prior to 14.1 Hot Fix Unity Pro versions all versions Modicon M340 versions prior to V3.20 Modicon M580 versions prior to V3.10 Description A vulnerability exists due to the improper neutralization of specia...
The vulnerability in HMI/SCADA Equinox Control Expert, related to the failure to protect the SQL query structure, allows a intruder to gain unauthorized access to protected information.
The vulnerability in HMI/SCADA Equinox Control Expert relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by sending specially crafted SQL queries to the database...
Schneider Electric EcoStruxure Control Expert and Unity Pro License Issue Vulnerability
Schneider Electric EcoStruxure Control Expert formerly Unity Pro and Unity Pro are both products of Schneider Electric, France. Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric's logic controller products, while Unity Pro is a general purpose...
CVE-2019-6855
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...
CVE-2019-6855
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...
Authorization
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...
CVE-2019-6855
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...
CVE-2019-6855
CVE-2019-6855 affects Schneider Electric EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) and Modicon M580 (all versions prior to V3.10). The vulnerability is an Incorrect Authorization issue that could cause a b...
CVE-2019-6855: Incorrect Authorization
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert all versions prior to 14.1 Hot Fix, Unity Pro all versions, Modicon M340 all versions prior to V3.20 , and Modicon M580 all versions prior to V3.10, which could cause a bypass of the authentication process between...
CVE-2019-18234
Equinox Control Expert all versions, is vulnerable to an SQL injection attack, which may allow an attacker to remotely execute arbitrary code...