CVE:CVE-2021-22778
CNNVD:CNNVD-202107-1033
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）是法国施耐德电气（Schneider Electric）公司的一套用于Schneider Electric逻辑控制器产品的编程软件。
EcoStruxure 多款产品 存在安全漏洞，该漏洞源于产品中存在保护不足的凭据漏洞。攻击者可利用该漏洞导致未经授权的用户在访问项目文件时读取或修改受保护的派生函数块。
solution:Upgrade schneider-electric ecostruxure_control_expert to a higher version than 15.0,15.0,and avoid the version (,15.0),15.0; Upgrade schneider-electric ecostruxure_process_expert to a higher version than *; Upgrade schneider-electric remoteconnect to a higher version than *