CVE-2020-7527

EPSS 0.05%
Veröffentlicht 31.08.2020 17:15:12
Zuletzt bearbeitet 21.11.2024 05:37:18
Quelle cybersecurity@se.com
CVE-Watchlists
Login
Unerledigt
Login

Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Schneider-electric ≫ Somove Version <= 2.8.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.121

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://www.se.com/ww/en/download/document/SEVD-2020-224-07/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-7527

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-7527

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-7527

EUVD