N/A

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause unauthorized access to a project file protected by a password when this file is shared with untrusted sources. An attacker may bypass the password protection and be able to view and modify a project file.

N/A

不充分的凭证保护机制

Schneider Electric EcoStruxure Control Expert 安全漏洞

Schneider Electric EcoStruxure Control Expert（前称Unity Pro）是法国施耐德电气（Schneider Electric）公司的一套用于Schneider Electric逻辑控制器产品的编程软件。 Schneider Electric EcoStruxure Control Expert 多款产品存在安全漏洞，该漏洞源于当与不受信任的源共享受密码保护的项目文件时，这可能导致对该文件的未经授权访问。攻击者可利用该漏洞绕过密码保护，并能够查看和修改项目文件。

N/A

N/A