CVE-2020-7547 - A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level

Back Back to CVE browser

HIGH

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level

Published Dec 1, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.31%

Description

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (1)

https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.se.com/ww/en/download/document/SEVD-2020-287-04/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Dec 1, 2020

Updated Aug 4, 2024

Reserved Jan 21, 2020

Link CVE-2020-7547

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-7547

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-7547