CVE-2020-28213CWE-494

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that…

published November 19, 2020

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01178 · 67.4th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2020-11-19T21:03Z
EPSS history
Timeline
  • 19 NOV 21:03Z
    A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that…
    cvelistv5