CVE-2020-7554

EPSS 2.4%CWE-119

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

19 Nov 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Affected products

n/a · IGSS Definition (Def.exe) version 14.0.0.20247 and prior

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.se.com/ww/en/download/document/SEVD-2020-315-03/https://www.zerodayinitiative.com/advisories/ZDI-21-093/