CVE-2020-7489 - A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification)

Back Back to CVE browser

CRITICAL

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification)

Published Apr 22, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.60%

Description

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28614
Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-105-01
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28614		Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-105-01		x_refsource_MISCPatchVendor Advisory