CVE:CVE-2021-22782
CNNVD:CNNVD-202107-1021
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）是法国施耐德电气（Schneider Electric）公司的一套用于Schneider Electric逻辑控制器产品的编程软件。
Schneider Electric EcoStruxure Control Expert多款产品存在安全漏洞，该漏洞源于产品中存在丢失敏感数据加密的漏洞。攻击者可利用该漏洞在访问项目文件时导致信息泄露，允许网络和处理信息、凭证或知识产权的泄露。
solution:Upgrade schneider-electric ecostruxure_control_expert to a higher version than 15.0,15.0,and avoid the version (,15.0),15.0; Upgrade schneider-electric ecostruxure_process_expert to a higher version than *; Upgrade schneider-electric remoteconnect to a higher version than *