critical9.8
CVE-2020-7489
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert…
Impact
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Machine Expert | All versions |
| Schneider-Electric | Somachine Basic | All versions |
| Schneider-Electric | Modicon M100 Firmware | All versions |
| Schneider-Electric | Modicon M200 Firmware | All versions |
| Schneider-Electric | Modicon M221 Firmware | All versions |