CVE-2020-7526

2020-08-3116:13:23

CWE-20

schneider

www.cve.org

AI Score

8.9

Confidence

High

EPSS

0.004

Percentile

72.8%

JSON

Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event.

CNA Affected

[
  {
    "product": "PowerChute Business Edition software V9.0.x and earlier ",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "PowerChute Business Edition software V9.0.x and earlier"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2020-224-05/