CVE-2020-7528 - AskarLabs CVE Database

CVE-2020-7528

Vendor N/A

Product SCADAPack 7x Remote Connect V3.6.3.574 and prior.

Weakness CWE-502 · Unsafe deserialization

Published September 16, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.

Key dates

02Disclosure timeline

September 16, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7528 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/502.html

Related vulnerabilities

04Related CVE

CVE-2024-2025 BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request CVE-2025-2244 Insecure PHP deserialization issue in GravityZone Console (VA-12634) CVE-2026-42359 Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator CVE-2023-23930 vantage6's Pickle serialization is insecure CVE-2017-12149