CVE-2020-7497 - AskarLabs CVE Database

CVE-2020-7497

Vendor N/A

Product EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)

Weakness CWE-22 · Path traversal

Published June 16, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause arbitrary application execution when the computer starts.

Key dates

02Disclosure timeline

June 16, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7497 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/22.html

Identifiers

CVE CVE-2020-7497

CWE CWE-22

Affected versions

Vendor N/A

Product EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)

Affected EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)