Unity Pro (Schneider-electric) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2020-12-11. Vendor: Schneider-electric.

CVEs of Unity Pro

• CVE-2020-7560 - CVSS 8.6 (high), 2020-12-11: A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control…
• CVE-2020-7475 - CVSS 9.8 (critical), 2020-03-23: A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in…
• CVE-2019-6855 - CVSS 7.3 (high), 2020-01-06: Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all…
• CVE-2016-8354 - CVSS 7 (high), 2017-02-13: An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator…
• CVE-2014-9200 - CVSS 7.5 (high), 2015-02-01: Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus…
• CVE-2013-0662 - CVSS 9.3 (critical), 2014-04-01: Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary…
• CVE-2011-3330 - CVSS 7.2 (high), 2011-11-04: Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and…