8.8

CVE-2020-7501

A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Vijeo Designer SwEdition basic Version <= 1.0
Schneider-electric ≫ Vijeo Designer SwEdition - Version <= 6.2
Schneider-electric ≫ Vijeo Designer Version 1.1 Update - SwEdition basic
Schneider-electric ≫ Vijeo Designer Version 1.1 Update hotfix_15 SwEdition basic
Schneider-electric ≫ Vijeo Designer Version 6.9 Update - SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.9 Update sp9 SwEdition -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.12% 0.619
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://www.se.com/ww/en/download/document/SEVD-2020-133-02/
Vendor Advisory