CVE-2020-28211: Schneider Electric Ecostruxure Control Expert

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.

Affected products

• Schneider Electric Ecostruxure Control Expert: any version

Published 2020-11-19. Last modified 2026-06-17.