CVE-2020-28221

A CWE-20: Improper Input Validation vulnerability exists in EcoStruxureâ„¢ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.1:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.1:sp1a:*:*:*:*:*:*
OR cpe:2.3:h:schneider-electric:hmi_sto_501:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmi_sto_511:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmi_sto_512:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmi_sto_531:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmi_sto_532:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmig3u:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmig3x:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmig5u:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmig5u2:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmist6200:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmist6400:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmist6500:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmist6600:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:hmist6700:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:schneider-electric:pro-face_blue:3.1:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:3.1:sp1a:*:*:*:*:*:*
OR cpe:2.3:h:schneider-electric:gp-4104g:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4104w:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4105g:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4105w:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4106g:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4106w:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4107g:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:gp-4107w:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5400wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5500tp:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5500wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5800wc:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5700wc:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5700tp:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5660tp:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5600tp:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5600ta:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5600wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5b41:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5b10:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:sp-5b00:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:st-6700wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:st-6600wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:st-6500wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:st-6400wa:-:*:*:*:*:*:*:*
cpe:2.3:h:schneider-electric:st-6200wa:-:*:*:*:*:*:*:*

Information

Published : 2021-01-26 10:15

Updated : 2021-02-12 11:21


NVD link : CVE-2020-28221

Mitre link : CVE-2020-28221


JSON object : View

CWE
CWE-20

Improper Input Validation

Advertisement

dedicated server usa

Products Affected

schneider-electric

  • hmi_sto_532
  • sp-5600wa
  • hmist6200
  • hmist6700
  • gp-4107g
  • gp-4106w
  • hmi_sto_501
  • hmi_sto_511
  • gp-4107w
  • pro-face_blue
  • hmi_sto_531
  • ecostruxure_operator_terminal_expert
  • sp-5700wc
  • sp-5b10
  • sp-5b00
  • st-6600wa
  • sp-5400wa
  • hmig3u
  • hmig3x
  • st-6200wa
  • st-6700wa
  • gp-4104g
  • hmi_sto_512
  • sp-5500wa
  • sp-5800wc
  • gp-4106g
  • hmig5u
  • hmist6400
  • sp-5b41
  • sp-5660tp
  • st-6400wa
  • hmist6600
  • gp-4105g
  • st-6500wa
  • hmist6500
  • sp-5700tp
  • hmig5u2
  • sp-5500tp
  • sp-5600ta
  • gp-4104w
  • gp-4105w
  • sp-5600tp