Non notée
CVE-2020-7528 A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior)…
Description
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SCADAPack 7x Remote Connect V3.6.3.574 and prior. | Versions non publiées |
Autres CVE de SCADAPack 7x Remote Connect V3.6.3.574 and prior.
Les 4 CVE de SCADAPack 7x Remote Connect V3.6.3.574 and prior. →
CVE-2020-7531
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which…
Non notée
CVE-2020-7530
A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows…
Non notée
CVE-2020-7529
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in…
Non notée