Critical severity9.8NVD Advisory· Published Nov 19, 2020· Updated Jun 17, 2026
CVE-2020-28212
CVE-2020-28212
Description
A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.
Affected products
3- EcoStruxure Control Expert/PLC Simulatordescription
- cpe:2.3:a:schneider-electric:ecostruxure_control_expert:*:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-315-07nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.