Path Traversal Vulnerability in EcoStruxure Operator Terminal Expert by Schneider Electric
CVE-2020-7497

9.8CRITICAL

Key Information:

Vendor
Schneider Electric
Status
Ecostruxure Operator Terminal Expert 3.1 Service Pack 1 And Prior (formerly Known As Vijeo Xd)
Vendor
CVE Published:
16 June 2020

Summary

A path traversal vulnerability exists in EcoStruxure Operator Terminal Expert, which may allow attackers to execute arbitrary applications upon system startup. This flaw can potentially be exploited to manipulate file paths, leading to unauthorized access and execution of malicious code. Users are advised to apply necessary updates and patches to mitigate this issue.

Affected Version(s)

EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)

References

https://www.se.com/ww/en/download/document/SEVD-2020-133-04
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.