CVE-2020-7559CWE-120

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now…

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01905 · 79.6th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2020-11-19T21:04Z
EPSS history
Timeline
  • 19 NOV 21:04Z
    A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now…
    cvelistv5