Vulnerability Description
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider-Electric | Pmepxm0100 Prosoft Configurator | <= 1.002 |
Related Weaknesses (CWE)
References
- https://www.se.com/ww/en/download/document/SEVD-2020-042-01/Vendor Advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-042-01/Vendor Advisory
FAQ
What is CVE-2020-7474?
CVE-2020-7474 is a vulnerability with a CVSS score of 7.8 (HIGH). A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using...
How severe is CVE-2020-7474?
CVE-2020-7474 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7474?
Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Pmepxm0100 Prosoft Configurator.