CVE-2020-28211

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.

Score

CVSS 3.1 7.8 High

Status

Modified - cybersecurity@se.com

Published

2020-11-19

Last modified

2024-08-04

Weaknesses

CWE-863

Affected products

• Ecostruxure Control Expert (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-315-07