Open Redirect Vulnerability in Schneider Electric Software Update
CVE-2020-7520
What is CVE-2020-7520?
A vulnerability in Schneider Electric Software Update allows attackers with privileged access to modify registry keys, redirecting software update traffic through malicious servers. This redirection can lead to execution of unauthorized code on the victim's system, potentially compromising sensitive information and system integrity. A man-in-the-middle technique is typically employed to facilitate this exploit, making it crucial for users to stay vigilant and apply necessary security patches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Schneider Electric Software Update (SESU) V2.4.0 and prior. Schneider Electric Software Update (SESU) V2.4.0 and prior.
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved