Vulnerability Spotlight: Remote code execution vulnerabilities in Schneider Electric Eco Struxure
Summary: Cisco Talos discovered two code execution vulnerabilities in Schneider Electric EcoStruxure Control Expert 14.1, one triggered by a large Modbus request to the PLC Simulator (TALOS-2020-1140/CVE-2020-7559) and one by opening a STA project archive containing a crafted APX project file (TALOS-2020-1144/CVE-2020-7560). Talos worked with Schneider under its coordinated disclosure policy to resolve the issues and make an update available, and released Snort rule 144:1 to detect exploitation attempts.
What you should know: EcoStruxure Control Expert is Schneider Electric's flagship software for programming and monitoring industrial networks, so a crafted network request or project archive reaching version 14.1 puts code execution inside the tooling that runs those environments.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-7559CVE-2020-7560
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026