CVE-2020-7490

published 2020-04-22

CVE-2020-7490: A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could…

Priority P3 36 high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	vijeo_designer	<= 1.0	—
schneider-electric	vijeo_designer	<= 6.2	—
schneider-electric	vijeo_designer	—	—
schneider-electric	vijeo_designer	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 6.9 MEDIUM AV:L/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-426