CVE-2020-7480: Code Injection
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-7480.
What is the severity level of CVE-2020-7480?
The severity level of CVE-2020-7480 is critical, with a severity value of 9.8.
What is the affected software for CVE-2020-7480?
The affected software for CVE-2020-7480 is Schneider-electric Andover Continuum (All versions).
What is the description of the vulnerability CVE-2020-7480?
The vulnerability CVE-2020-7480 is an Improper Control of Generation of Code ('Code Injection') vulnerability that could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.
How can I fix the vulnerability CVE-2020-7480?
To fix the vulnerability CVE-2020-7480, it is recommended to apply the latest security patch provided by Schneider-electric.