Description
Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors.
References
- http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-12-020-03.pdf
- 51605 vdb-entry
- 47723 third-party-advisory
- schneider-modicon-unity-dos(72586) vdb-entry
- https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-12-020-03