Schneider-electric » Unity Pro : Security Vulnerabilities, CVEs, CVSS score >= 8
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.
Max CVSS
8.6
EPSS Score
0.07%
Published
2020-12-11
Updated
2022-01-31
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.
Max CVSS
9.8
EPSS Score
0.23%
Published
2020-03-23
Updated
2022-02-03
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
Max CVSS
9.3
EPSS Score
11.50%
Published
2014-04-01
Updated
2022-02-03
3 vulnerabilities found