CVEvulnerability

CVE-2020-7523

7.8 HIGH Published 2020-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-269

Description

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected configurations

• schneider-electric modbus driver suite (< 14.15.0.0) • schneider-electric modbus serial driver (< 2.20 ie 30) • schneider-electric modbus serial driver (< 3.20 ie 30)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References