CVE-2020-7532 - A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer

Back Back to CVE browser

HIGH

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer

Published Sep 16, 2020

7.8

HIGH

CVSS 3.1

EPSS 1.36%

Description

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.

Affected products

Vendor n/a Product SCADAPack x70 Security Administrator V1.2.0 and prior. Default
unknown
Affected
- SCADAPack x70 Security Administrator V1.2.0 and prior.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	SCADAPack x70 Security Administrator V1.2.0 and prior.	unknown	Affected SCADAPack x70 Security Administrator V1.2.0 and prior.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28657
Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-252-01/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28657		Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-252-01/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Sep 16, 2020

Updated Aug 4, 2024

Reserved Jan 21, 2020

Link CVE-2020-7532

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7532

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Sep 16, 2020

Updated Aug 4, 2024

Link EUVD-2020-28657

GitHub

No data