CoreCVE
Back

HIGH

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked

Published Aug 31, 2020

Description

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner schneider
Published Aug 31, 2020
Updated Aug 4, 2024
Reserved Jan 21, 2020
Link CVE-2020-7523

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-7523

Red Hat

No data

ENISA EUVD

Assigner schneider
Published Aug 31, 2020
Updated Aug 4, 2024
Link EUVD-2020-28648

GitHub

No data