{"api_version":"v1","generated_at":"2026-10-10T09:10:00+00:00","product":{"cve_count":1,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-publisher-not-identified-ecostruxure-control-expert-all-versions-prior-to-14-1-hot-fix-unity-pro-all-versions-3ff9f2997a8a","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10)","next_cursor":null,"observations":[{"affected":"EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20), Modicon M580 (all versions prior to V3.10)","affected_versions_present":true,"cve_id":"CVE-2020-7475","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-7475","fixed":"After downloading the new version, found in the Download Links section below, all of the following steps are required to remediate the vulnerability: STEP 1: Update software and firmware: \u2022 On the engineering workstation: o Recommended remediation: update to EcoStruxure Control Expert V15.0 (Available in the Download Links section) \u2022 On the Modicon M340 controller: update to firmware V3.20 or above (Available in the Download Links section) \u2022 On the Modicon M580 controller: update to firmware V3.10 or above (Available in the Download Links section) STEP 2: Update projects in Ecostruxure Control Expert by: \u2022 Setting up an application password in the project properties \u2022 Changing the version of the controller firmware to match the new firmware version of the target controller STEP 3: Rebuild and transfer projects in EcoStruxure Control Expert: \u2022 Rebuild all current projects \u2022 Transfer them to Modicon controllers STEP 4: Configure the Access Controls on Modicon controllers: \u2022 Setup network segmentation and implement a firewall to block all unauthorized access to port 502/TCP","last_modified":"2024-08-04T09:33:18.769Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-080-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2020-080-01_Modicon_EcoStruxure%E2%84%A2_Control%20Expert_UnityPro_V3.0.pdf","primary_source":"","published":"2020-03-23T18:56:18.000Z"}],"source_generated_at":"2026-10-10T06:21:41.304Z","vendor":"Publisher not identified"}}
