CVE-2020-7495
published 2020-06-16CVE-2020-7495: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure…
PriorityP425medium5.5CVSS 3.1
AVLACLPRNUIRSUCNIHAN
EPSS
0.88%
54.9th percentile
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| schneider-electric | ecostruxure_operator_terminal_expert | <= 3.0 | — |
| schneider-electric | ecostruxure_operator_terminal_expert | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Schneider Electric EcoStruxure Operator Terminal Expert
cisa_ics·2020-05-21·CVSS 7.8
[HIGH] Schneider Electric EcoStruxure Operator Terminal Expert
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Schneider Electric EcoStruxure Operator Terminal Expert
Last RevisedMay 21, 2020
Alert CodeICSA-20-142-02
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.6
- ATTENTION: Low skill level to exploit/public exploits are available
- Vendor: Schneider Electric
- Equipment: EcoStruxure Operator Terminal Expert
- Vulnerabilities: SQL Injection, Path Traversal, Argument Injection
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow unauthorized write access or remote code execution.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
Schneider Electric reports the
GHSA
GHSA-gjhf-3jpp-hgj2: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxur
ghsa_unreviewed·2022-05-24
CVE-2020-7495 [MEDIUM] GHSA-gjhf-3jpp-hgj2: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxur
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-06-16
Published