Description
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | — |
Advisories 1
- SEVD-2020-315-07 PLC Simulator on EcoStruxure™ Control Expert and Process Expert Schneider Electric CPCERT · Mar 14, 2023