A
CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.
References
| Link | Resource |
|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2021-012-01/ | Patch Vendor Advisory |
| https://www.se.com/ww/en/download/document/SEVD-2021-012-01/ | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
History
21 Nov 2024, 05:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.se.com/ww/en/download/document/SEVD-2021-012-01/ - Patch, Vendor Advisory |
Information
Published : 2021-01-26 18:15
Updated : 2024-11-21 05:22
NVD link : CVE-2020-28221
Mitre link : CVE-2020-28221
CVE.ORG link : CVE-2020-28221
JSON object : View
Products Affected
- gp-4104g
- hmig5u
- hmist6600
- hmig3x
- sp-5700tp
- hmi_sto_512
- hmist6200
- st-6500wa
- sp-5b41
- pro-face_blue
- st-6700wa
- gp-4107g
- sp-5600wa
- st-6400wa
- gp-4107w
- gp-4105w
- gp-4105g
- hmi_sto_501
- sp-5500tp
- gp-4106g
- sp-5500wa
- sp-5800wc
- sp-5b00
- hmi_sto_532
- ecostruxure_operator_terminal_expert
- st-6600wa
- hmist6400
- gp-4104w
- sp-5b10
- gp-4106w
- hmist6500
- sp-5600ta
- sp-5660tp
- st-6200wa
- hmig5u2
- sp-5400wa
- hmi_sto_531
- hmist6700
- hmig3u
- sp-5600tp
- sp-5700wc
- hmi_sto_511
CWE
CWE-20
Improper Input Validation