CVEvulnerability
CVE-2020-10632
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-02-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-282
Description
Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.
Affected configurations
• emerson openenterprise scada server (<= 3.3.4)
Related
Weakness · CWE (1)
- CWE-282 Improper Ownership Management weakness
References
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02 Mitigation, Third Party Advisory, US Government Resource
- https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02 Mitigation, Third Party Advisory, US Government Resource