CVE-2021-22778

 

Published at: - 14-07-2021 05:15

Last modified: - 28-09-2022 05:16

Total changes: - 3

Description

Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), and SCADAPack RemoteConnect for x70, all versions, that could cause protected derived function blocks to be read or modified by unauthorized users when accessing a project file.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

 

Verification logic

 

Reference

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01

 

Keywords

NVD

 

CVE-2021-22778

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures