Schneider Electric Modicon Controllers and Software (Update A)
Successful exploitation of these vulnerabilities may allow arbitrary code execution and loss of confidentiality and integrity of the project file.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22782US | medium5.5OT elevated | — | ||
Missing Encryption of Sensitive Data vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process… | ||||
| CVE-2021-22781US | medium5.5 | — | ||
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process… | ||||
| CVE-2021-22780US | high7.1 | — | ||
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process… | ||||
| CVE-2021-22779US | critical9.1 | — | ||
Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Exp… | ||||
| CVE-2021-22778US | high7.1 | — | ||
Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process… | ||||
| CVE-2020-12525US | high7.8 | — | ||
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage. | ||||
references
External citations — patches, advisories, analysis.
remediations (30)
- MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Control Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationEcoStruxure Process Expert
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M340 CPU (part numbers BMXP34*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationModicon M580 CPU (part numbers BMEP* and BMEH*)
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01 - MitigationSCADAPack RemoteConnect for x70
Schneider Electric provides detailed mitigation information for each of the affected products in their own advisory, for more information about these issues, please refer to the original Schneider Electric publication SEVD-2021-194-01.
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan