CyberSec.Space Logo
CVEブラウザに戻る

CVE-2020-7489

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0030%
EPSS Percentile3.78th
Published2020年4月22日
Last Modified2026年5月28日

Vulnerability Description

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.

Affected Platforms (CPE)

📦
Schneider Electric

Ecostruxure Machine Expert

All versions
📦
Schneider Electric

Somachine Basic

All versions
💻
Schneider Electric

Modicon M100 Firmware

All versions
💻
Schneider Electric

Modicon M200 Firmware

All versions
💻
Schneider Electric

Modicon M221 Firmware

All versions

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-01
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-01

関連する脆弱性情報

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...

CVE-2026-121917.8

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdri...

CVE-2026-121905.3

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the compo...