Skip to content
OpenAdvisories
High ICSA-20-336-01 1 CVE

Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)

Published Dec 1, 2020 · Updated Dec 1, 2020

Vendor: Schneider Electric Product: Harmony iPC (HMIG5U HMIG5U2) using legacy BIOS EcoStruxure Operator Terminal Expert Runtime Product: Windows PC using legacy BIOS EcoStruxure Operator Terminal Expert Runtime

Summary

Successful exploitation of this vulnerability may allow unauthorized command execution by a local user of the Windows engineering workstation, which could result in loss of availability, confidentiality, and integrity of the workstation where EcoStruxure Operator Terminal Expert runtime is installed.

Vulnerabilities 1

  • Unscored —
    CVE-2020-7544

    A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD…

Revision history

  1. #1

    ICSA-20-336-01 Schneider Electric EcoStruxure Operator Terminal Expert runtime (Vijeo XD)

References