CVE-2020-28211

Name of the Vulnerable Software and Affected Versions EcoStruxure Control Expert (all versions)

Description A vulnerability exists in the PLC Simulator of EcoStruxure Control Expert that could cause bypass of authentication when overwriting memory using a debugger. This issue is related to incorrect authorization.

Recommendations For all versions, consider disabling the debugger functionality as a temporary workaround to minimize the risk of exploitation until a patch is available. Restrict access to the PLC Simulator to minimize the risk of unauthorized access.