CVE-2020-7559: Buffer Overflow

Published Nov 19, 2020

Updated

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.

Affected Software

1 affected component

Schneider-electric Ecostruxure Control Expert

Remediation

Patch Available

https://www.se.com/ww/en/download/document/SEVD-2020-315-07

Event History

Nov 19, 2020

CVE Published

via MITRE·09:04 PM

Data Sourced

via MITRE·09:04 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2020-7559.

What is the severity of CVE-2020-7559?

CVE-2020-7559 has a severity rating of 7.5 (High).

What is the affected software for CVE-2020-7559?

The affected software for CVE-2020-7559 is Schneider-electric EcoStruxure Control Expert (all versions).

What is the CWE ID for CVE-2020-7559?

CVE-2020-7559 has CWE IDs 119 and 120.

Are there any references for CVE-2020-7559?

Yes, you can find references for CVE-2020-7559 at the following links: [Reference 1](https://www.se.com/ww/en/download/document/SEVD-2020-315-07), [Reference 2](https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1140).