CVE-2020-7497

Description

References

• se.com/ww/en/download/document/SEVD-2020-133-04 · Vendor Advisory

ecostruxure operator terminal expert의 다른 취약점

• CVE-2023-1049높음 7.8 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when …
• CVE-2022-41671높음 7.8A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries wit…
• CVE-2022-41670높음 7.8A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component th…
• CVE-2022-41669높음 7.8A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with lo…
• CVE-2022-41668높음 7.8A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from …