Vulnerability · Published Nov 19, 2020 · Assigned by schneider
CVE-2020-7544
High 7.8
In plain English
A high-severity privilege mismanagement in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 75.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) | EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) |
Weakness: CWE-269
References
- https://www.se.com/ww/en/download/document/SEVD-2020-315-02/ x_refsource_MISC