Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:unity_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Unity Pro (15944b85-d6f6-5db8-b90a-f7c0976f722a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-7560 |
vulnerable | 2026-06-08 05:27:13.546028 |
Details available
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.
Published: 2020-12-11T00:52:30.000Z
Updated: 2024-08-04T09:33:19.451Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7475 |
vulnerable | 2026-06-08 05:27:13.167711 |
Details available
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.
Published: 2020-03-23T18:56:18.000Z
Updated: 2024-08-04T09:33:18.769Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6855 |
vulnerable | 2026-06-08 05:14:13.437700 |
Details available
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
Published: 2020-01-06T22:56:58.000Z
Updated: 2024-08-04T20:31:04.396Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8354 |
vulnerable | 2026-06-08 05:08:14.166361 |
Details available
An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity project file can make the simulator execute malicious code by redirecting the control flow of these instructions.
Published: 2017-02-13T21:00:00.000Z
Updated: 2024-08-06T02:20:30.802Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0662 |
vulnerable | 2026-06-08 05:03:49.372432 |
Details available
Multiple stack-based buffer overflows in ModbusDrv.exe in Schneider Electric Modbus Serial Driver 1.10 through 3.2 allow remote attackers to execute arbitrary code via a large buffer-size value in a Modbus Application Header.
Published: 2014-03-28T19:00:00.000Z
Updated: 2024-08-06T14:33:05.415Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3330 |
vulnerable | 2026-06-08 04:59:24.663831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.