CVE-2020-7490
First published: Wed Apr 22 2020(Updated: )
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Vijeo Designer | <=1.0 | |
| Schneider-electric Vijeo Designer | <=6.2 | |
| Schneider-electric Vijeo Designer | =1.1 | |
| Schneider-electric Vijeo Designer | =1.1-hotfix_15 | |
| Schneider-electric Vijeo Designer | =6.9 | |
| Schneider-electric Vijeo Designer | =6.9-sp9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-7490.
What is the severity level of CVE-2020-7490?
The severity level of CVE-2020-7490 is high (7.8).
Which software versions are affected by CVE-2020-7490?
Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior) are affected by CVE-2020-7490.
How can CVE-2020-7490 be exploited?
CVE-2020-7490 can be exploited by loading a malicious DLL library into Vijeo Basic, which could cause arbitrary code execution.
Is there a fix available for CVE-2020-7490?
The vendor has released a fix for CVE-2020-7490. Please refer to the vendor's advisory for the patch.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/event
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric vijeo designer
- version/schneider-electric vijeo designer/1.0
- version/schneider-electric vijeo designer/6.2
- version/schneider-electric vijeo designer/1.1
- version/schneider-electric vijeo designer/1.1-hotfix_15
- version/schneider-electric vijeo designer/6.9
- version/schneider-electric vijeo designer/6.9-sp9