PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-7559 | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Cont | HIGH 7.5 | 1.9 % | ||
| CVE-2020-7538 | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Un | HIGH 7.5 | 1.3 % | ||
| CVE-2020-28213 | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (al | HIGH 8.8 | 1.2 % | ||
| CVE-2020-28212 | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (n | CRITICAL 9.8 | 2.8 % | ||
| CVE-2020-28211 | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that | HIGH 7.8 | 0.3 % |