CVE-2020-7569

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - cybersecurity@se.com

Published

2020-11-19

Last modified

2024-08-04

Weaknesses

CWE-434

Affected products

• Webreports (Schneider-electric)

References

• https://www.se.com/ww/en/download/document/SEVD-2020-315-04/