PT-2020-6316
CVE-2020-28211
·
تاريخ النشر
2020-11-19
·
تاريخ التحديث
2022-01-31
الوصف من
CVSS 2.0
6.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:N
Name of the Vulnerable Software and Affected Versions
EcoStruxure Control Expert (all versions)
Description
A vulnerability exists in the PLC Simulator of EcoStruxure Control Expert that could cause bypass of authentication when overwriting memory using a debugger. This issue is related to incorrect authorization.
Recommendations
For all versions, consider disabling the debugger functionality as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to the PLC Simulator to minimize the risk of unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾