Description
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | — |
Advisories 2
- SEVD-2020-315-07 PLC Simulator on EcoStruxure™ Control Expert and Process Expert Schneider Electric CPCERT · Mar 14, 2023
- ICSA-20-315-03 Schneider Electric PLC Simulator for EcoStruxure Control Expert CISA ICS & IT advisories · Nov 10, 2020