Known vulnerabilities in PLC Simulator for EcoStruxure Control Expert

Vendor: Schneider Electric
Software: PLC Simulator for EcoStruxure Control Expert
Software CPE: cpe:2.3:a:schneider_electric:plc_simulator_for_ecostruxure_control_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PLC Simulator for EcoStruxure Control Expert PLC Simulator for EcoStruxure Control Expert is affected by 5 known vulnerabilities: 2 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48961 - Stack-based buffer overflow
CVE-2020-7559		 CWE-121 High
No
No
 - 19.11.2020 SB2020111109
#VU48963 - Improper Authorization
CVE-2020-28211		 CWE-285 Low
No
No
 - 19.11.2020 SB2020111109
#VU48964 - Improper Restriction of Excessive Authentication Attempts
CVE-2020-28212		 CWE-307 High
No
No
 - 19.11.2020 SB2020111109
#VU48965 - Download of Code Without Integrity Check
CVE-2020-28213		 CWE-494 Medium
No
No
 - 19.11.2020 SB2020111109
#VU48363 - Improper Check for Unusual or Exceptional Conditions
CVE-2020-7538		 CWE-754 Medium
No
No
 - 11.11.2020 SB2020111109