CyberSec.Space Logo
Back to CVE Browser

CVE-2020-7560

HIGH
8.6
CVSS Severity Score
EPSS Score0.1200%
EPSS Percentile29.90th
PublishedDec 11, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.

Affected Platforms (CPE)

📦
Schneider Electric

Ecostruxure Control Expert

All versions
📦
Schneider Electric

Unity Pro

All versions

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-343-01/
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-343-01/

Related Vulnerabilities

CVE-2020-74899.8

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists ...

CVE-2020-74759.8

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), reflective DLL, vuln...

CVE-2021-227799.1

Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including a...

CVE-2021-227977.8

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause mali...