{"api_version":"v1","generated_at":"2026-10-10T09:40:00+00:00","product":{"cve_count":1,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-publisher-not-identified-ecostruxure-control-expert-all-versions-prior-to-v15-0-sp1-including-all-versions-of-2932c419c964","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*)","next_cursor":null,"observations":[{"affected":"EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versions of Unity Pro), EcoStruxure Control Expert V15.0 SP1, EcoStruxure Process Expert (all versions, including all versions of EcoStruxure Hybrid DCS), SCADAPack RemoteConnect for x70 (all versions), Modicon M580 CPU (all versions - part numbers BMEP* and BMEH*), Modicon M340 CPU (all versions - part numbers BMXP34*)","affected_versions_present":true,"cve_id":"CVE-2021-22779","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-22779","fixed":"EcoStruxure\u2122 Control Expert V15.1*, available for download below, includes a fix for CVE-2021-22778, CVE-2021-22780, CVE-2021-22781, CVE-2021-22782, CVE-2020-12525, and CVE-2021-22779: https://www.se.com/ww/en/download/document/EcoStruxureControlExpert_V15.1/ * Upgrading to EcoStruxure\u2122 Control Expert V15.1 is the first step in a two steps process to fully address CVE-2021-22779. The second step is to update the firmware of the Modicon Controllers referenced. Important Note: \u2022 The fix is provided through the additional feature \u201cfile encryption\u201d, for further information on the feature and how to set it up please refers to the chapter \u201cfile encryption\u201d of the help file available in the EcoStruxure\u2122 Control Expert v15.0 SP1. \u2022 This feature is proposed by default when creating a new project. \u2022 This feature is also available, after selecting \u201cproject\u201d in structural view, in the \u201cEdit/ Properties/ Project & Controller Protection\u201d menu. \u2022 For new projects: Customers are recommended to apply this feature to all new projects. \u2022 For existing projects: Customers are recommended to apply this feature to the existing projects coming from trusted source. For sta project files, as a reminder, project modification can be done in connected mode to prevent desynchronization and keep the controller in RUN state. \u2022 It is possible to set a security level specific to the Derived Function Blocks (DFB) in addition to the file encryption feature. Please refer to the chapter \"How to protect a DFB type\" in the EcoStruxure\u2122 Control Expert help file for further information. \u2022 Customers are recommended to share project files only when configured with the encryption feature described above. If customers choose not to apply the remediation provided above, they should immediately apply the following mitigations to reduce the risk of exploit. These mitigations also reduce the risk of exploit for CVE-2021-22779 on all versions of EcoStruxure\u2122 Control Expert, including V15.1: \u2022 Store the project files in a secure storage and restrict the access to only trusted users \u2022 When exchanging files over the network, use secure communication protocols \u2022 Encrypt project files when stored \u2022 Only open project files received from trusted source \u2022 Compute a hash of the project files and regularly check the consistency of this hash to verify the integrity before usage \u2022 Harden the workstation running EcoStruxure\u2122 Control Expert or Unity Pro Customers using Unity Pro should strongly consider migrating to EcoStruxure\u2122 Control Expert. Please contact your local Schneider Electric technical support for more information.","last_modified":"2026-05-29T13:50:09.766Z","patch_url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-194-01_EcoStruxure_Control_Expert_Process_Expert_SCADAPack_RemoteConnect_Modicon_M580_M340.pdf","primary_source":"","published":"2021-07-14T14:26:41.000Z"}],"source_generated_at":"2026-10-10T06:21:41.304Z","vendor":"Publisher not identified"}}