CVE-2020-7528

SCADAPack 7x Remote Connect (versions up to 3.6.3.574) is affected by CWE-502 Deserialization of Untrusted Data. A vulnerability exists where an attacker can construct a malicious .PRJ file containing a serialized buffer that leads to arbitrary code execution. The issue is consistently described ...

CVE-2020-7528

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer...

CVE-2020-7529: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Transversal' vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file...

CVE-2020-7530: Improper Authorization

A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows improper access to executable code folders...

CVE-2020-7528: Deserialization of Untrusted Data

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer...

PT-2020-19617 · Schneider Electric · Scadapack 7X Remote Connect

Name of the Vulnerable Software and Affected Versions: SCADAPack 7x Remote Connect versions 3.6.3.574 and prior Description: A vulnerability exists that allows improper access to executable code folders due to improper authorization. Recommendations: For SCADAPack 7x Remote Connect versions...

CVE-2020-7532: Deserialization of Untrusted Data

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator V1.2.0 and prior which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer...

CVE-2020-7531: Improper Access Control

A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect V3.6.3.574 and prior which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user...

Schneider Electric SCADAPack VxWorks Debugger漏洞

施耐德电气集团对能源和基础设施、工业、数据中心和网络、楼宇以及住宅等领域提供产品和服务。 Schneider Electric SCADAPack 330, 334, 350, 357产品由于启用了VxWorks调试代理存在安全漏洞，远程攻击者通过发送特制的请求到UDP端口17185，利用此漏洞可控制受影响设备。 0 Schneider Electric SCADAPack 35x Schneider Electric SCADAPack 33x 厂商补丁： Schneider Electric ------------------...