Deserialization Vulnerability in SCADAPack 7x Remote Connect by Schneider Electric

CVE-2020-7528

Summary

A deserialization vulnerability has been identified in SCADAPack 7x Remote Connect. This flaw arises when untrusted data is deserialized, potentially allowing an attacker to execute arbitrary code on the affected system. The vulnerability is triggered by crafting a malicious .PRJ file that contains a specially designed serialized buffer, enabling unauthorized access and control over the system. It is critical for users of SCADAPack 7x Remote Connect to apply security updates and follow best practices to mitigate the risk associated with this vulnerability.

References