The secrets of Schneider Electric’s UMAS protocol

🗓️ 29 Sep 2022 08:00:53Reported by Kaspersky ICS CERTType

The UMAS protocol used by Schneider Electric PLCs had security vulnerabilities, such as CVE-2020-28212 and CVE-2021-22779, allowing unauthorized access and modification. Schneider Electric addressed the issues with an Application Password mechanism but subsequent analysis revealed flaws. Updates were released to fix the vulnerabilities

Reporter	Title	Published	Views	Family All 29
ATTACKERKB	CVE-2021-22779	14 Jul 202100:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins	19 Jul 202116:29	–	avleonov
BDU FSTEC	The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Expert, allows a intruder to bypass the authentication process.	23 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the programming software simulator PLC EcoStruxure Control Expert, the automation system ProcessExpert, the configuration software SCADAPack RemoteConnect, and the micro-software for programmable logic controllers Modicon M580 and Modicon M340 relates to the bypassing of authentication procedures. This allows a perpetrator to gain access in read-only and write mode.	31 May 202200:00	–	bdu_fstec
Circl	CVE-2020-28212	29 Sep 202214:00	–	circl
Circl	CVE-2021-22779	15 Jul 202111:07	–	circl
CNNVD	Schneider Electric EcoStruxure Control Expert 授权问题漏洞	19 Nov 202000:00	–	cnnvd
CNNVD	Schneider Electric EcoStruxure Control Expert 安全漏洞	14 Jul 202100:00	–	cnnvd
CNVD	Unspecified Vulnerability in Schneider Electric EcoStruxure Control Expert	20 Nov 202000:00	–	cnvd
CVE	CVE-2020-28212	19 Nov 202021:03	–	cve