Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-26	CVE-2020-28221	Unspecified vulnerability in Schneider-Electric products A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI. network low complexity schneider-electric critical	9.8