ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-7533

—
CVSS 3.1
9.8 critical
EPSS
2%p83
Published
()
Modified
Description

CWE-287: Improper Authentication vulnerability exists which could cause the execution of commands on the webserver without authentication when sending specially crafted HTTP requests.

Vendors
schneider-electric
Products
modicon m340 bmxp3420302 firmware, modicon m340 bmxp342000 firmware, modicon m340 bmxp341000 firmware, modicon m340 bmxp3420102 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware, bmxnoc0401 firmware, tsxp574634 firmware, tsxp575634 firmware, tsxp576634 firmware, tsxety4103 firmware, tsxety5103 firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news

No ingested article mentions this CVE yet.