Advisories · Technology

PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions).

Every CVE that names PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2020-7559 CVE record

Buffer overflow in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- Memory corruption
Not analysed yet 19 Nov 2020
CVE-2020-7538 CVE record

Improper check for unusual conditions in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- CWE-754
Not analysed yet 19 Nov 2020
CVE-2020-28213 CVE record

Download of code without integrity check in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- CWE-494
Not analysed yet 19 Nov 2020
CVE-2020-28212 CVE record

Unlimited authentication attempts in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- Authentication bypass
Not analysed yet 19 Nov 2020
CVE-2020-28211 CVE record

Incorrect authorization in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
- Broken access control
Not analysed yet 19 Nov 2020