Description
A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | — |
Advisories 1
- SEVD-2020-315-07 PLC Simulator on EcoStruxure™ Control Expert and Process Expert Schneider Electric CPCERT · Mar 14, 2023