[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIePUH8OskEr5Q6RP0hgu5P8M24OLZVpz58U5WgROC0c":3,"g5a-ex:schneider-electric\u002Fecostruxure_control_expert@*":119,"g5a-family:schneider-electric\u002Fecostruxure_control_expert":121},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":96,"seoMetadata":97,"meta":116},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"schneider-electric","ecostruxure_control_expert",7,26,0,"2024-02-14",[14,17,20,22,25,27,29],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"14.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"14.1",1,{"version":21,"cve_count":9,"kev_count":11,"has_kev":16},"15.0",{"version":23,"cve_count":24,"kev_count":11,"has_kev":16},"15.1",2,{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"15.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"15.3",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"16.0","Ecostruxure Control Expert by Schneider-electric is a technology product with 7 tracked versions and 26 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":9,"kev_count":11,"has_kev":16},{"version":23,"cve_count":24,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},[41,49,56,61,66,71,76,82,86,91],{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":48},"CVE-2021-22797","A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)","2022-04-13",7.8,"v3.1","High",0.261,{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":55},"CVE-2020-28212","A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when a brute force attack is done over Modbus.","2020-11-19",9.8,"Critical",0.02757,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":60},"CVE-2022-26507","A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT&T Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828, CVE-2021-21829, or CVE-2021-21830. NOTE: This vulnerability only affects products that are no longer supported by the maintainer","2022-04-14",0.02423,{"cveId":62,"description":63,"publishedDate":52,"cvssScore":64,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":65},"CVE-2020-7559","A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.",7.5,0.01905,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":70},"CVE-2020-7475","A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.","2020-03-23",0.01581,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":75},"CVE-2022-45789","A CWE-294: Authentication Bypass by Capture-replay vulnerability exists that could cause execution of unauthorized Modbus functions on the controller when hijacking an authenticated Modbus session. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions)\n\n","2023-01-31",0.01455,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":81},"CVE-2020-7560","A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.","2020-12-11",8.6,0.01447,{"cveId":83,"description":84,"publishedDate":52,"cvssScore":64,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":85},"CVE-2020-7538","A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.",0.01288,{"cveId":87,"description":88,"publishedDate":52,"cvssScore":89,"cvssVersion":46,"severity":47,"isKev":16,"epssScore":90},"CVE-2020-28213","A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.",8.8,0.01178,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":53,"cvssVersion":46,"severity":54,"isKev":16,"epssScore":95},"CVE-2022-45788","A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when a malicious project file is loaded onto the controller. Affected Products: EcoStruxure Control Expert (All Versions), EcoStruxure Process Expert (All Versions), Modicon M340 CPU - part numbers BMXP34* (All Versions), Modicon M580 CPU - part numbers BMEP* and BMEH* (All Versions), Modicon M580 CPU Safety - part numbers BMEP58*S and BMEH58*S (All Versions), Modicon Momentum Unity M1E Processor - 171CBU* (All Versions), Modicon MC80 - BMKC80 (All Versions), Legacy Modicon Quantum - 140CPU65* and Premium CPUs - TSXP57* (All Versions)\n\n","2023-01-30",0.01173,[],{"title":98,"metaDescription":99,"keywords":100,"structuredData":101},"Ecostruxure Control Expert by Schneider-electric - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Ecostruxure Control Expert by Schneider-electric covering 7 versions with 26 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Ecostruxure Control Expert vulnerabilities, Ecostruxure Control Expert security, Ecostruxure Control Expert CVE, Schneider-electric Ecostruxure Control Expert, Ecostruxure Control Expert threat intelligence, Schneider-electric security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":102,"@type":103,"name":104,"description":99,"url":105,"manufacturer":106,"applicationCategory":110,"softwareVersion":111,"mainEntity":112},"https:\u002F\u002Fschema.org","SoftwareApplication","Ecostruxure Control Expert","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fschneider-electric\u002Fecostruxure_control_expert",{"@type":107,"name":108,"url":109},"Organization","Schneider-electric","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fschneider-electric","Security Software","7 versions tracked",{"@type":113,"name":114,"description":115,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Ecostruxure Control Expert Security Vulnerabilities","Security vulnerabilities affecting Ecostruxure Control Expert by Schneider-electric",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":117,"apiVersion":118},"2026-10-19T03:04:51.021Z","3.0",{"rows":120,"total":11,"capped":16,"failed":11},[],[]]