ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-25182

—
CVSS 3.1
6.7 medium
EPSS
<1%p38
Published
()
Modified
Description

Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x searches for and loads DLLs as dynamic libraries. Uncontrolled loading of dynamic libraries could allow a local, unauthenticated attacker to execute arbitrary code. This vulnerability only affects ISaGRAF Runtime when running on Microsoft Windows systems.

Vendors
schneider-electricrockwellautomationxylem
Products
easergy t300 firmware, easergy c5 firmware, micom c264 firmware, pacis gtw firmware, saitel dp firmware, epas gtw firmware, saitel dr firmware, scd2200 firmware, aadvance controller, isagraf free runtime, micro810 firmware, micro820 firmware
Weakness
CWE-427
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

No ingested article mentions this CVE yet.