CVE-2020-7529

MEDIUM 5.5CVE-2020-7529 · Published 16/09/2020 · updated 17/06/2026

In short

CVE-2020-7529 is a MEDIUM (CVSS 5.5) vulnerability affecting scadapack 7x remote connect (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 0.88%, higher than 59.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
scadapack 7x remote connect schneider-electric	`≤ 3.6.3.574`	No fix yet

Description

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.

References

se.com/ww/en/download/document/SEVD-2020-252-01 · Vendor Advisory

More vulnerabilities in scadapack 7x remote connect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free