CyberSec.Space Logo
Back to CVE Browser

CVE-2020-7490

HIGH
7.8
CVSS Severity Score
EPSS Score0.1920%
EPSS Percentile36.96th
PublishedApr 22, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.

Affected Platforms (CPE)

📦
Schneider Electric

Vijeo Designer

<= 1.0
📦
Schneider Electric

Vijeo Designer

<= 6.2
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 6.9
📦
Schneider Electric

Vijeo Designer

= 6.9

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-03
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-03

Related Vulnerabilities

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2020-75018.8

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designe...

CVE-2021-228177.8

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation direct...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...