High SEVD-2020-224-01 1 CVE

Schneider Electric Modbus Serial Driver

Published Aug 11, 2020 · Updated Oct 13, 2020 · Revision 2

Vendor: Schneider Electric Product: Modbus Driver Suite Product: Modbus Serial Driver (32 bits) Product: Modbus Serial Driver (64 bits)

Summary

Schneider Electric is aware of a vulnerability in the Modbus Serial Driver Component.

Vulnerabilities 1

Unscored —

CVE-2020-7523

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notificatio…

Aug 31, 2020

Revision history

2020-10-13 #1.1.0
-Added Remediation note for EcoStruxure Machine Expert Basic -Minor formatting changes
2020-08-11 #1.0.0
Original Release

References

Schneider Electric Modbus Serial Driver - SEVD-2020-224-01 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-224-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD_2020-224-01_Modbus_Serial_Driver_Security_NotificationV1.1.pdf
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/