PT-2020-19607 · Schneider Electric · Ecostruxure Machine Expert+1

Published 2020-04-22 · Updated 2026-05-28 · CVE-2020-7489

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (affected versions not specified)

Description A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') issue exists, which could result in DLL substitution. This could allow the transference of malicious code to the controller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2020-7489

Affected Products

Ecostruxure Machine Expert

Somachine Basic

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-7489 · Security Note
• https://se.com/ww/en/download/document/SEVD-2020-105-01 · Vendor Advisory
• https://t.me/cvenotify/3058 · Telegram Post
• https://t.me/cveNotify/165104 · Telegram Post