Not rated
CVE-2020-7528 A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior)…
Description
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SCADAPack 7x Remote Connect V3.6.3.574 and prior. | Versions not published |
Other CVEs of SCADAPack 7x Remote Connect V3.6.3.574 and prior.
The 4 CVEs of SCADAPack 7x Remote Connect V3.6.3.574 and prior. →
CVE-2020-7531
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which…
Not rated
CVE-2020-7530
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows…
Not rated
CVE-2020-7529
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in…
Not rated