Skip to content
OpenAdvisories
High SEVD-2020-070-04 2 CVEs

Andover Continuum System

Published Mar 10, 2020 · Updated May 12, 2020 · Revision 3

Vendor: Schneider Electric Product: Andover Continuum

Summary

Schneider Electric is aware of multiple vulnerabilities in the Andover Continuum product line.
Andover Continuum allows users to view and control functions of the Continuum system.

Vulnerabilities 2

  • Unscored —
    CVE-2020-7480

    A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All vers…

  • Unscored —
    CVE-2020-7481

    A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Ando…

Revision history

  1. #2.1.0

    Minor updates to overview, vulnerability details, and product information for clarification (page 1-2)

  2. #2.0.0

    Revised overview, affected products, vulnerability details, and remediation for clarification (page 1-2)

  3. #1.0.0

    Original Release

References