CVE-2020-7532

Published: Sep 16, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.

Affected (1)

Products: Schneider Electric: Scadapack X70 Security Administrator

Schneider Electric

1 product

Scadapack X70 Security Administrator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Schneider Electric Scadapack X70 Security Administrator	Up to 1.2.0

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://www.se.com/ww/en/download/document/SEVD-2020-252-01/

Source: cybersecurity@se.com

Vendor Advisory

https://www.se.com/ww/en/download/document/SEVD-2020-252-01/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.