CVE-2020-7494

Description

References

• se.com/ww/en/download/document/SEVD-2020-133-04 · Vendor Advisory

More vulnerabilities in ecostruxure operator terminal expert

• CVE-2023-1049HIGH 7.8 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when …
• CVE-2022-41671HIGH 7.8A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries wit…
• CVE-2022-41670HIGH 7.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component th…
• CVE-2022-41669HIGH 7.8A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with lo…
• CVE-2022-41668HIGH 7.8A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from …