| Package | Affected versions | Patched versions |
|---|---|---|
| ecostruxure operator terminal expert | = 3.1 | |
| pro-face blue | = 3.1 |
A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free