CVE-2020-28213

8.8HIGH

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution

公開日: 11/19/2020更新日: 11/21/2024
NVDで表示MITREで表示

説明

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.

AI分析AIによる分析

影響を受ける製品

schneider-electricecostruxure_control_expert

参照