Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-28221

EPSS 0.91% · P76
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-28221

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Opera Software Opera 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Opera Software Opera是挪威欧朋（Opera Software）公司的一款Web浏览器，它支持多窗口浏览、自定义用户界面等功能。 Opera Software Opera 存在输入验证错误漏洞。攻击者可以利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A and prior running on Harmony HMIs HMIST6 Series, HMIG3U in HMIGTU Series, HMISTO Series and Pro-face BLUE 3.1 Service Pack 1A and prior running on Pro-face HMIs: ST6000 Series, SP-5B41 in SP5000 Se EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A and prior running on Harmony HMIs HMIST6 Series, HMIG3U in HMIGTU Series, HMISTO Series and Pro-face BLUE 3.1 Service Pack 1A and prior running on Pro-face HMIs: ST6000 Series, SP-5B41 in SP5000 Se -

II. Public POCs for CVE-2020-28221

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-28221

请登录查看更多情报信息。

Same Patch Batch · n/a · 2021-01-25 · 32 CVEs total

CVE-2020-35854Textpattern 跨站脚本漏洞
CVE-2020-27542Rostelecom CS-CSHW 命令注入漏洞
CVE-2020-27541Rostelecom CS-C2SHW 缓冲区错误漏洞
CVE-2020-27539Rostelecom CS-CSHW 缓冲区错误漏洞
CVE-2020-27540Rostelecom CS-C2SHW 数据伪造问题漏洞
CVE-2020-35845FastStone Image Viewer 缓冲区错误漏洞
CVE-2020-35844FastStone Image Viewer 缓冲区错误漏洞
CVE-2020-35843FastStone Image Viewer 缓冲区错误漏洞
CVE-2020-27814OpenJPEG 代码问题漏洞
CVE-2020-25737Hackolade 安全漏洞
CVE-2021-22698Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞
CVE-2021-22697Schneider Electric EcoStruxure Power Build - Rapsody 代码问题漏洞
CVE-2020-0236Google Android 缓冲区错误漏洞
CVE-2021-3185gst-plugins-bad 安全漏洞
CVE-2020-35513Linux Kernel NFS 安全漏洞
CVE-2021-3278Local Service Search Engine Management System SQL注入漏洞
CVE-2020-35576TP-LINK TL-WR841N 操作系统命令注入漏洞
CVE-2020-358534images Image Gallery Management System 跨站脚本漏洞
CVE-2020-35270Projectnotes Student Result Management System SQL注入漏洞
CVE-2020-36221OpenLDAP 数字错误漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a
Same weakness: CWE-20

V. Comments for CVE-2020-28221

No comments yet

Leave a comment