PT-2020-6378 · Schneider Electric · Ecostruxure Control Expert

Alexander Perez-Palma + 1 · Published 2020-11-19 · Updated 2022-02-03 · CVE-2020-7559

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EcoStruxure Control Expert (all versions)

Description A buffer copy without checking the size of input issue exists in the PLC Simulator of EcoStruxure Control Expert software. This could cause a crash of the PLC simulator when receiving a specially crafted request over Modbus. The issue allows a remote attacker to potentially cause a denial of service.

Recommendations For all versions, consider restricting access to the Modbus protocol until a fix is available. As a temporary workaround, disabling the PLC Simulator functionality may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2021-04337

CVE-2020-7559

Affected Products

Ecostruxure Control Expert

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1140 · Exploit
• https://bdu.fstec.ru/vul/2021-04337 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-7559 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-315-07 · Vendor Advisory
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-315-07_PLC_Simulator_on_EcoStruxure%E2%84%A2_Control_Expert_and_Process_Expert_Security_Notification_V3.1.pdf&p_Doc_Ref=SEVD-2020-315-07 · Note
• https://download.schneider-electric.com/files?p_enDocType=Technical+leaflet&p_File_Name=SEVD-2020-315-07_PLC_Simulator_on_EcoStruxure%E2%84%A2_Control_Expert_and_Process_Expert_Security_Notification_V3.1.pdf&p_Doc_Ref=SEVD-2020-315-07 · Note
• https://t.me/cvenotify/5882 · Telegram Post
• https://t.me/cybersecuritytechnologies/2259 · Telegram Post