Main Vulnerability Database Vulnerabilities #VU27384

Improper Neutralization of Special Elements in Output Used by a Downstream Component in Schneider Electric products - CVE-2020-7489

Published: April 28, 2020

Vulnerability identifier: #VU27384

CSH Severity: High

CVSS v4: 6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-7489

CWE-ID: CWE-74

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to improper validation of input. A remote attacker can execute arbitrary code on the controller.

SoMachine
EcoStruxure Machine Expert
Modicon M100
Modicon M200
Modicon M221

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.