CVE-2020-7547
CVE-2020-7547
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Dec 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.
Affected products
n/a · EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →