Описание
A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*
EPSS
Процентиль: 57%
0.00349
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-494
Связанные уязвимости
github
больше 3 лет назад
A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.
EPSS
Процентиль: 57%
0.00349
Низкий
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-494