CVE-2020-7546

Опубликовано: 01 дек. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

A CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow an attacker to perform actions on behalf of the authorized user when accessing an affected webpage.

Ссылки

https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:schneider-electric:ecostruxure_energy_expert:2.0:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:7.0:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:8.0:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:ecostruxure_power_monitoring_expert:9.0:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:power_manager:1.1:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:power_manager:1.2:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:power_manager:1.3:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:powerscada_expert_with_advanced_reporting_and_dashboards:8.0:*:*:*:*:*:*:*

cpe:2.3:a:schneider-electric:powerscada_operation_with_advanced_reporting_and_dashboards:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00302

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xcfh-h8m8-532v

github

больше 3 лет назад