cnvd-2020-03779
Vulnerability from cnvd
Title
Schneider Electric EcoStruxure Control Expert和Unity Pro授权问题漏洞
Description
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）和Unity Pro都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric EcoStruxure Control Expert是一套用于Schneider Electric逻辑控制器产品的编程软件。Unity Pro是一套用于Modicon Premium、Atrium和Quantum PLC系列产品的通用编程、调试和操作软件。 EcoStruxure Control Expert V14.0版本和Unity Pro（全部版本）中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。目前没有详细的漏洞细节提供。
Severity
中
Patch Name
Schneider Electric EcoStruxure Control Expert和Unity Pro授权问题漏洞的补丁
Patch Description
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）和Unity Pro都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric EcoStruxure Control Expert是一套用于Schneider Electric逻辑控制器产品的编程软件。Unity Pro是一套用于Modicon Premium、Atrium和Quantum PLC系列产品的通用编程、调试和操作软件。 EcoStruxure Control Expert V14.0版本和Unity Pro（全部版本）中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://www.se.com/ww/en/download/document/SEVD-2019-344-02/

Reference
https://nvd.nist.gov/vuln/detail/CVE-2019-6855
Impacted products
Name
['Schneider Electric Unity Pro', 'Schneider Electric EcoStruxure Control Expert 14.0']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-6855"
    }
  },
  "description": "Schneider Electric EcoStruxure Control Expert\uff08\u524d\u79f0Unity Pro\uff09\u548cUnity Pro\u90fd\u662f\u6cd5\u56fd\u65bd\u8010\u5fb7\u7535\u6c14\uff08Schneider Electric\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Schneider Electric EcoStruxure Control Expert\u662f\u4e00\u5957\u7528\u4e8eSchneider Electric\u903b\u8f91\u63a7\u5236\u5668\u4ea7\u54c1\u7684\u7f16\u7a0b\u8f6f\u4ef6\u3002Unity Pro\u662f\u4e00\u5957\u7528\u4e8eModicon Premium\u3001Atrium\u548cQuantum PLC\u7cfb\u5217\u4ea7\u54c1\u7684\u901a\u7528\u7f16\u7a0b\u3001\u8c03\u8bd5\u548c\u64cd\u4f5c\u8f6f\u4ef6\u3002\n\nEcoStruxure Control Expert V14.0\u7248\u672c\u548cUnity Pro\uff08\u5168\u90e8\u7248\u672c\uff09\u4e2d\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u4e2d\u7f3a\u5c11\u8eab\u4efd\u9a8c\u8bc1\u63aa\u65bd\u6216\u8eab\u4efd\u9a8c\u8bc1\u5f3a\u5ea6\u4e0d\u8db3\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.se.com/ww/en/download/document/SEVD-2019-344-02/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-03779",
  "openTime": "2020-02-05",
  "patchDescription": "Schneider Electric EcoStruxure Control Expert\uff08\u524d\u79f0Unity Pro\uff09\u548cUnity Pro\u90fd\u662f\u6cd5\u56fd\u65bd\u8010\u5fb7\u7535\u6c14\uff08Schneider Electric\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Schneider Electric EcoStruxure Control Expert\u662f\u4e00\u5957\u7528\u4e8eSchneider Electric\u903b\u8f91\u63a7\u5236\u5668\u4ea7\u54c1\u7684\u7f16\u7a0b\u8f6f\u4ef6\u3002Unity Pro\u662f\u4e00\u5957\u7528\u4e8eModicon Premium\u3001Atrium\u548cQuantum PLC\u7cfb\u5217\u4ea7\u54c1\u7684\u901a\u7528\u7f16\u7a0b\u3001\u8c03\u8bd5\u548c\u64cd\u4f5c\u8f6f\u4ef6\u3002\r\n\r\nEcoStruxure Control Expert V14.0\u7248\u672c\u548cUnity Pro\uff08\u5168\u90e8\u7248\u672c\uff09\u4e2d\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7f51\u7edc\u7cfb\u7edf\u6216\u4ea7\u54c1\u4e2d\u7f3a\u5c11\u8eab\u4efd\u9a8c\u8bc1\u63aa\u65bd\u6216\u8eab\u4efd\u9a8c\u8bc1\u5f3a\u5ea6\u4e0d\u8db3\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Schneider Electric EcoStruxure Control Expert\u548cUnity Pro\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Schneider Electric Unity Pro",
      "Schneider Electric EcoStruxure Control Expert 14.0"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-6855",
  "serverity": "\u4e2d",
  "submitTime": "2020-01-07",
  "title": "Schneider Electric EcoStruxure Control Expert\u548cUnity Pro\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.