Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Schneider Electric
Denial Of Service
Authentication Bypass
Modicon Quantum Plc
NVD
CVSS 3.1
9.8
EPSS
4.1%