CVE-2020-7490: High severity vijeo designer vulnerability
Published Apr 22, 2020
·Updated
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.
Affected Software
6 affected components
Schneider-electric Vijeo Designer<=1.0
Schneider-electric Vijeo Designer<=6.2
Schneider-electric Vijeo Designer=1.1
Schneider-electric Vijeo Designer=1.1-hotfix_15
Schneider-electric Vijeo Designer=6.9
Schneider-electric Vijeo Designer=6.9-sp9
Event History
Apr 22, 2020
CVE Published
via MITRE·06:48 PM
Data Sourced
via MITRE·06:48 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-7490.
2
What is the severity level of CVE-2020-7490?
The severity level of CVE-2020-7490 is high (7.8).
3
Which software versions are affected by CVE-2020-7490?
Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior) are affected by CVE-2020-7490.
4
How can CVE-2020-7490 be exploited?
CVE-2020-7490 can be exploited by loading a malicious DLL library into Vijeo Basic, which could cause arbitrary code execution.
5
Is there a fix available for CVE-2020-7490?
The vendor has released a fix for CVE-2020-7490. Please refer to the vendor's advisory for the patch.