Not rated
CVE-2020-28212 A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on…
Description
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) | Versions not published |
Other CVEs of PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
The 5 CVEs of PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) →
CVE-2020-7559
A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC…
Not rated
CVE-2020-7538
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª…
Not rated
CVE-2020-28213
A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert…
Not rated
CVE-2020-28211
A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity…
Not rated