CVE-2020-7474

CVE-2020-7474

Vendor N/A

Product ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module

Weakness CWE-427

Published March 23, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL.

Key dates

02Disclosure timeline

March 23, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7474 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/427.html

Related vulnerabilities

01Description

02Disclosure timeline

03References

04Related CVE