CVE-2020-7478

published 2020-03-23

CVE-2020-7478: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a remote unauthenticated attacker to read arbitrary files from the IGSS server PC on an unrestricted or shared network when the IGSS Update Service is enabled.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	interactive_graphical_scada_system	>= 14.0 < 14.0.0.20009	14.0.0.20009

CWE-22