CVE-2016-8354

An issue was discovered in Schneider Electric Unity PRO prior to V11.1

published February 13, 2017

CVSS
—
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity project file can make the simulator execute malicious code by redirecting the control flow of these instructions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01103 · 65.2th percentile
Published
2017-02-13T21:00Z
EPSS history
Timeline
  • 13 FEB 21:00Z
    An issue was discovered in Schneider Electric Unity PRO prior to V11.1
    cvelistv5