CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering
workstation when specific driver interface is invoked locally by an authenticated user with crafted input.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Uni-Telway driver
Vendor
Schneider Electric
Product
Uni-Telway driver
Platforms
Unknown
Default status
unaffected
Uni-Telway driver · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Uni-Telway driver used in EcoStruxure Control Expert
Vendor
Schneider Electric
Product
Uni-Telway driver used in EcoStruxure Control Expert
Platforms
Unknown
Default status
unaffected
Uni-Telway driver used in EcoStruxure Control Expert · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions
affected
Unavailable
Unavailable
Unavailable
None listed
Uni-Telway driver used in EcoStruxure Process Expert
Vendor
Schneider Electric
Product
Uni-Telway driver used in EcoStruxure Process Expert
Platforms
Unknown
Default status
unaffected
Uni-Telway driver used in EcoStruxure Process Expert · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform
Vendor
Schneider Electric
Product
Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform
Platforms
Unknown
Default status
unaffected
Uni-Telway driver used in EcoStruxure Process Expert for AVEVA System Platform · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All Versions
affected
Unavailable
Unavailable
Unavailable
None listed
Uni-Telway driver used in OPC Factory Server
Vendor
Schneider Electric
Product
Uni-Telway driver used in OPC Factory Server
Platforms
Unknown
Default status
unaffected
Uni-Telway driver used in OPC Factory Server · Scoped product and version facts