CVE-2016-8354

ÉLEVÉE 7.0CVE-2016-8354 · Published 13/02/2017 · updated 17/06/2026

En bref

CVE-2016-8354 est une vulnérabilité ÉLEVÉE (CVSS 7.0) touchant unity pro (schneider-electric).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 65.7% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
unity pro schneider-electric	`≤ 11.0`	No fix yet

Description

An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator delivered with Unity PRO. These x86 instructions are subsequently executed directly by the simulator. A specially crafted patched Unity project file can make the simulator execute malicious code by redirecting the control flow of these instructions.

References

securityfocus.com/bid/93830 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-16-306-03 · Third Party Advisory

Autres vulnérabilités de unity pro

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free