critical9.8
CVE-2020-28221
A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that …
Impact
A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Operator Terminal Expert | Version 3.1 |
| Schneider-Electric | Pro-Face Blue | Version 3.1 |