Unity Loader and OS Loader Security Notification (CVE-2020-7498)

This document details a critical vulnerability (CVE-2020-7498) involving hard-coded credentials in Schneider Electric's Unity Loader and OS Loader software, which are used to upgrade firmware on Modicon controllers. It provides remediation steps for affected products, including network segmentation, deactivating FTP services, changing default credentials, and enforcing access control lists across various Modicon PLC models.