CVE-2020-7527

EPSS 0.05%
Published 31.08.2020 17:15:12
Last modified 21.11.2024 05:37:18
Source cybersecurity@se.com
Teams watchlist Login
Open Login

Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Schneider-electric ≫ Somove Version <= 2.8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.121

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.se.com/ww/en/download/document/SEVD-2020-224-07/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-7527

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-7527

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-7527

EUVD