Description
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | — |
Advisories 1
- SEVD-2020-315-07 PLC Simulator on EcoStruxure™ Control Expert and Process Expert Schneider Electric CPCERT · Mar 14, 2023