CyberSec.Space Logo
Back to CVE Browser

CVE-2020-7489

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0030%
EPSS Percentile3.78th
PublishedApr 22, 2020
Last ModifiedMay 28, 2026

Vulnerability Description

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.

Affected Platforms (CPE)

📦
Schneider Electric

Ecostruxure Machine Expert

All versions
📦
Schneider Electric

Somachine Basic

All versions
💻
Schneider Electric

Modicon M100 Firmware

All versions
💻
Schneider Electric

Modicon M200 Firmware

All versions
💻
Schneider Electric

Modicon M221 Firmware

All versions

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-01
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-01

Related Vulnerabilities

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...