PT-2019-5402 · Schneider Electric · Easergy Builder

Published 2019-08-21 · Updated 2020-07-27 · CVE-2020-7518

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions Easergy Builder versions 1.4.7.2 and older

Description The issue is related to improper input validation in the Easergy Builder software, which could allow a remote attacker to modify project configuration files.

Recommendations For Easergy Builder versions 1.4.7.2 and older, update to a version newer than 1.4.7.2 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-02735

CVE-2020-7518

Affected Products

Easergy Builder

References · 5

• https://osv.dev/vulnerability/CVE-2020-7518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7518 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-161-05 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02735 · Security Note
• https://se.com/us/en/download/document/SEVD-2020-161-05 · Note