CVE-2020-28213CWE-494

CVE-2020-28213: vulnerability in PLC Simulator on EcoStruxureª Control Expert…

Published · Updated

Follow this CVE+ Monitor PLC Simulator on EcoStruxureª Control Expert

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.
Affected products
n/a · PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)