Lucene search
PRIOn knowledge basePRION:CVE-2020-7478HistoryMar 23, 2020 - 8:15 p.m.
Design/Logic Flaw
2020-03-2320:15:00
PRIOn knowledge base
www.prio-n.com
4
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update Service is enabled.
| CPE | Name | Operator | Version |
|---|---|---|---|
| interactive_graphical_scada_system | ge | 14.0 | |
| interactive_graphical_scada_system | lt | 14.0.0.20009 |
Related
cvelist
cvelist
CVE-2020-7478
2020-03-23 19:17:11
nvd
nvd
CVE-2020-7478
2020-03-23 20:15:12
cve
cve
CVE-2020-7478
2020-03-23 20:15:12
checkpoint_advisories
checkpoint_advisories
Schneider Electric IGSSupdateservice Directory Traversal (CVE-2020-7478)
2020-04-27 00:00:00
zdi
zdi
ics
ics
Schneider Electric IGSS SCADA Software
2020-04-03 12:00:00