CVE-2020-28213

8.8 highEPSS 1.2%

High (8.8) in schneider-electric ecostruxure control expert. EPSS 1.2% chance of exploitation in the next 30 days.

A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2020-11-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:ecostruxure_control_expert

References

https://www.se.com/ww/en/download/document/SEVD-2020-315-07
https://www.se.com/ww/en/download/document/SEVD-2020-315-07

Check your stack JSON