https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:05:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03844 bdu:2021-03844 https://cve.radiocsirt.org/vuln/bdu:2021-03844 https://cve.radiocsirt.org/vuln/certfr-2020-avi-166 certfr-2020-avi-166 https://cve.radiocsirt.org/vuln/certfr-2020-avi-166 https://cve.radiocsirt.org/vuln/cnvd-2020-23198 cnvd-2020-23198 https://cve.radiocsirt.org/vuln/cnvd-2020-23198 https://cve.radiocsirt.org/vuln/euvd-2026-37914 EUVD-2026-37914 https://cve.radiocsirt.org/vuln/euvd-2026-37914 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7475 <p>A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (&#39;Injection&#39;), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.</p> <p>A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (&#39;Injection&#39;), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7475 https://cve.radiocsirt.org/vuln/ghsa-3mwf-xhc6-4rgf <p>A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (&#39;Injection&#39;), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.</p> <p>A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (&#39;Injection&#39;), reflective DLL, vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10), which, if exploited, could allow attackers to transfer malicious code to the controller.</p> https://cve.radiocsirt.org/vuln/ghsa-3mwf-xhc6-4rgf https://cve.radiocsirt.org/vuln/gsd-2020-7475 gsd-2020-7475 https://cve.radiocsirt.org/vuln/gsd-2020-7475 https://cve.radiocsirt.org/vuln/sevd-2020-080-01 <p>Researchers from Airbus Cybersecurity have made Schneider Electric aware of a vulnerability in two versions of Schneider Electric&#39;s Modicon programmable controllers and its EcoStruxure Control Expert (formerly Unity Pro) programming software. Since alerting us to the vulnerability, Airbus Cybersecurity and Schneider Electric have collaborated to validate the research and to assess its true impact. Our mutual findings demonstrate that while the discovered vulnerability affects Schneider Electric offers, it equally impacts many other vendors and the global industrial automation market in general, especially when the baseline assumption of the attack technique Airbus Cybersecurity demonstrated is considered. Given certain conditions, and assuming an attacker has access to the network, many devices available from several different industrial control vendors are likewise vulnerable. Details of the vulnerability and a remediation are included below. However, as a general guideline, Schneider Electric and Airbus Cybersecurity encourage all industrial companies to ensure they have implemented cybersecurity best practices across their operations and supply chains to reduce cyber risks. Where appropriate this includes locating industrial systems and remotely accessible devices behind firewalls; installing physical controls to prevent unauthorized access; preventing mission-critical systems and devices from being accessed from outside networks; systematical…</p> <p>Researchers from Airbus Cybersecurity have made Schneider Electric aware of a vulnerability in two versions of Schneider Electric&#39;s Modicon programmable controllers and its EcoStruxure Control Expert (formerly Unity Pro) programming software. Since alerting us to the vulnerability, Airbus Cybersecurity and Schneider Electric have collaborated to validate the research and to assess its true impact. Our mutual findings demonstrate that while the discovered vulnerability affects Schneider Electric offers, it equally impacts many other vendors and the global industrial automation market in general, especially when the baseline assumption of the attack technique Airbus Cybersecurity demonstrated is considered. Given certain conditions, and assuming an attacker has access to the network, many devices available from several different industrial control vendors are likewise vulnerable. Details of the vulnerability and a remediation are included below. However, as a general guideline, Schneider Electric and Airbus Cybersecurity encourage all industrial companies to ensure they have implemented cybersecurity best practices across their operations and supply chains to reduce cyber risks. Where appropriate this includes locating industrial systems and remotely accessible devices behind firewalls; installing physical controls to prevent unauthorized access; preventing mission-critical systems and devices from being accessed from outside networks; systematical…</p> https://cve.radiocsirt.org/vuln/sevd-2020-080-01