PT-2019-5402 · Schneider Electric · Easergy Builder

Publicado 2019-08-21 · Atualizado 2020-07-27 · CVE-2020-7518

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Easergy Builder versions 1.4.7.2 and older

Description The issue is related to improper input validation in the Easergy Builder software, which could allow a remote attacker to modify project configuration files.

Recommendations For Easergy Builder versions 1.4.7.2 and older, update to a version newer than 1.4.7.2 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2020-02735

CVE-2020-7518

Produtos afetados

Easergy Builder

Referências · 5

• https://osv.dev/vulnerability/CVE-2020-7518 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-7518 · Nota de Segurança
• https://se.com/ww/en/download/document/SEVD-2020-161-05 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2020-02735 · Nota de Segurança
• https://se.com/us/en/download/document/SEVD-2020-161-05 · Nota