CVEvulnerability

CVE-2020-7480

9.8 CRITICAL Published 2020-03-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-03-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.

Affected configurations

• schneider-electric andover continuum 9680 firmware • schneider-electric andover continuum 5740 firmware • schneider-electric andover continuum 5720 firmware • schneider-electric andover continuum bcx4040 firmware • schneider-electric andover continuum bcx9640 firmware • schneider-electric andover continuum 9900 firmware • schneider-electric andover continuum 9940 firmware • schneider-electric andover continuum 9941 firmware • schneider-electric andover continuum 9924 firmware • schneider-electric andover continuum 9702 firmware • schneider-electric andover continuum 9200 firmware

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References