CVE:CVE-2020-7489
CNNVD:CNNVD-202004-1950
Schneider Electric EcoStruxure Machine Expert–Basic和SoMachine Basic都是法国施耐德电气（Schneider Electric）公司的产品。Schneider Electric EcoStruxure Machine Expert–Basic是一款PLC配置应用程序。该程序主要用于可编程逻辑控制器的配置、编程和应用程序调试等。SoMachine Basic是一款PLC配置应用程序。该程序主要用于可编程逻辑控制器的配置、编程和应用程序调试等。
Schneider Electric EcoStruxure Machine Expert – Basic或SoMachine Basic中存在注入漏洞。攻击者可利用该漏洞将恶意代码传输到控制器。
solution:Upgrade schneider-electric ecostruxure_machine_expert to a higher version than *; Upgrade schneider-electric somachine_basic to a higher version than *; Upgrade schneider-electric modicon_m100_firmware to a higher version than *; Upgrade schneider-electric modicon_m200_firmware to a higher version than *; Upgrade schneider-electric modicon_m221_firmware to a higher version than *