ICSA-20-315-03

icsaUScisa_csaf_ot

Schneider Electric PLC Simulator for EcoStruxure Control Expert

view advisory published 2020-11-10

Successful exploitation of this vulnerability could cause a denial-of-service condition, which could result in a failure of the EcoStruxture Control Expert Simulator.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2020-7538UShigh7.5—
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationPLC Simulator for EcoStruxure Control Expert

    If users choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:

  • MitigationPLC Simulator for Unity Pro (former name of EcoStruxure Control Expert)

    If users choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit:

  • FixedPLC Simulator for EcoStruxure Control Expert

    Harden the engineering workstation running PLC Simulator for EcoStruxure Control Expert

  • FixedPLC Simulator for Unity Pro (former name of EcoStruxure Control Expert)

    Harden the engineering workstation running PLC Simulator for EcoStruxure Control Expert

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan