CVE-2020-7559: Schneider Electric Ecostruxure Control Expert

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.

Affected products

• Schneider Electric Ecostruxure Control Expert: any version

Published 2020-11-19. Last modified 2026-06-17.