CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2020-7501

HIGH
8.8
CVSS Severity Score
EPSS Score0.0050%
EPSS Percentile11.16th
Published2020年6月16日
Last Modified2024年11月21日

Vulnerability Description

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer.

Affected Platforms (CPE)

📦
Schneider Electric

Vijeo Designer

<= 1.0
📦
Schneider Electric

Vijeo Designer

<= 6.2
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 1.1
📦
Schneider Electric

Vijeo Designer

= 6.9
📦
Schneider Electric

Vijeo Designer

= 6.9

References & Advisories

🔗 https://www.se.com/ww/en/download/document/SEVD-2020-133-02/
🔗 https://www.se.com/ww/en/download/document/SEVD-2020-133-02/

相關漏洞威脅

CVE-2021-227049.1

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by V...

CVE-2020-74907.8

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 ...

CVE-2021-228177.8

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation direct...

CVE-2021-227057.8

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or...