CVE-2020-7501
First published: Tue Jun 16 2020(Updated: )
A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer.
Credit: cybersecurity@se.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Schneider-electric Vijeo Designer | <=1.0 | |
| Schneider-electric Vijeo Designer | <=6.2 | |
| Schneider-electric Vijeo Designer | =1.1 | |
| Schneider-electric Vijeo Designer | =1.1-hotfix_15 | |
| Schneider-electric Vijeo Designer | =6.9 | |
| Schneider-electric Vijeo Designer | =6.9-sp9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-7501.
What is the severity of CVE-2020-7501?
The severity of CVE-2020-7501 is high.
Which software is affected by CVE-2020-7501?
Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) are affected.
What is the CWE ID of CVE-2020-7501?
The CWE ID of CVE-2020-7501 is CWE-798.
How can unauthorized read and write be caused by CVE-2020-7501?
Unauthorized read and write can occur when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer due to the hard-coded credentials vulnerability.
- collector/nvd-index
- agent/author
- agent/references
- agent/weakness
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/schneider-electric
- canonical/schneider-electric vijeo designer
- version/schneider-electric vijeo designer/1.0
- version/schneider-electric vijeo designer/6.2
- version/schneider-electric vijeo designer/1.1
- version/schneider-electric vijeo designer/1.1-hotfix_15
- version/schneider-electric vijeo designer/6.9
- version/schneider-electric vijeo designer/6.9-sp9