CVE-2020-7532 - AskarLabs CVE Database

CVE-2020-7532

Vendor N/A

Product SCADAPack x70 Security Administrator V1.2.0 and prior.

Weakness CWE-502 · Unsafe deserialization

Published September 16, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.

Key dates

02Disclosure timeline

September 16, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-7532 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/502.html

Related vulnerabilities

04Related CVE

CVE-2021-25642 Apache Hadoop YARN remote code execution in ZKConfigurationStore of capacity scheduler CVE-2022-39256 Orckestra C1 CMS's deserialization of untrusted data allows for arbitrary code execution. CVE-2024-0668 Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action CVE-2026-5536 FedML-AI FedML gRPC server grpc_server.py sendMessage deserialization CVE-2025-43850 GHSL-2025-020_Retrieval-based-Voice-Conversion-WebUI