CyberSec.Space Logo
返回 CVE 浏览器

CVE-2020-7490

HIGH
7.8
CVSS Severity Score
EPSS Score0.1920%
EPSS Percentile36.96th
Published2020年4月22日
Last Modified2024年11月21日

Vulnerability Description

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.

Affected Platforms (CPE)

📦
Schneider Electric

Vijeo Designer

<= 1.0
📦
Schneider Electric

Vijeo Designer

<= 6.2
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 6.9
📦
Schneider Electric

Vijeo Designer

= 6.9

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-03
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-105-03

相关漏洞威胁

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2020-75018.8

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designe...

CVE-2021-228177.8

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation direct...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...