← Back

Scadapack 7x Remote Connect

scadapack_7x_remote_connect

Vendor: Schneider Electric • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7531
1Schneider Electric
1Scadapack 7x Remote Connect
Nov 21, 2024
Sep 16, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is execu...Show more
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.Show less
CVE-2020-7530
1Schneider Electric
1Scadapack 7x Remote Connect
Nov 21, 2024
Sep 16, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to executable code folders.
CVE-2020-7529
1Schneider Electric
1Scadapack 7x Remote Connect
Nov 21, 2024
Sep 16, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprot...Show more
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.Show less
CVE-2020-7528
1Schneider Electric
1Scadapack 7x Remote Connect
Nov 21, 2024
Sep 16, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a ma...Show more
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.Show less