CVE-2020-28211 - A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger

Back Back to CVE browser

HIGH

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger

Published Nov 19, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.

Affected products

Vendor n/a Product PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) Default
n/a
- Version
  PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)

n/a

Version	Status	Constraints
PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20695
Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-315-07
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20695		Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-315-07		x_refsource_MISCPatchVendor Advisory