CVE-2020-7529

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.

Score

CVSS 3.1 5.5 Medium

Status

Modified - cybersecurity@se.com

Published

2020-09-16

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Scadapack 7x Remote Connect (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-252-01/