VDB
BDU%3A2021-04173
BDU%3A2021-04173
PUBLISHED
CVSS 9.399999618530273 CRITICAL
Уязвимость программного средства программирования ПЛК (программируемых логических контроллеров) EcoStruxure Control Expert, позволяющая нарушителю обойти процедуру аутентификации
Risk Scores
CVSS 2.0
9.399999618530273
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | EcoStruxure Control Expert |
Timeline
- Aug 23, 2021 CVE Published
- Jun 28, 2023 CVE Updated
References
- https://securelist.ru/the-secrets-of-schneider-electrics-umas-protocol/105911/ url
- https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-315-07_PLC_Simulator_on_EcoStruxure%E2%84%A2_Control_Expert_and_Process_Expert_Security_Notification_V3.1.pdf&p_Doc_Ref=SEVD-2020-315-07 advisory