Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2021-01-26	CVE-2020-28221	Improper Input Validation vulnerability in Schneider-Electric products A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI. network schneider-electric CWE-20 critical	9.3