CVE-2020-7560

Published: Dec 11, 2020Modified: Jun 17, 2026

8.6

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 6.0

Source: NVD

Description

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.

Affected (2)

Products: Schneider Electric: Ecostruxure Control Expert, Unity Pro

Schneider Electric

2 products

Ecostruxure Control Expert

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Schneider Electric Ecostruxure Control Expert	All versions
Schneider Electric Unity Pro	All versions

Related CWEs

Write-what-where Condition

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

References (2)

https://www.se.com/ww/en/download/document/SEVD-2020-343-01/

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/ww/en/download/document/SEVD-2020-343-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.