CVE-2020-7497

概要

参考情報

• se.com/ww/en/download/document/SEVD-2020-133-04 · Vendor Advisory

ecostruxure operator terminal expert のその他の脆弱性

• CVE-2023-1049高 7.8 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when …
• CVE-2022-41671高 7.8A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries wit…
• CVE-2022-41670高 7.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component th…
• CVE-2022-41669高 7.8A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with lo…
• CVE-2022-41668高 7.8A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from …