VDB
CVE-2020-7564
CVE-2020-7564
PUBLISHED
De multiples vulnérabilités ont été découvertes dans les produits Schneider. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une atteinte à la confidentialité des données.
EPSS 1.10% · 62.4th percentile
Risk Scores
EPSS Score
1.10%
62.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | N/A | |
| N/A | N/A | |
| Schneider Electric | Modicon M340 |
Timeline
- Nov 12, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 27, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 6, 2022 EPSS Score
References
- https://cert.ssi.gouv.fr/avis/CERTFR-2020-AVI-726/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-05/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-07/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-01/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-04/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-06/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-02/ advisory
- https://www.se.com/ww/en/download/document/SESB-2020-315-01/ advisory
- https://cert.ssi.gouv.fr/avis/CERTFR-2022-AVI-815/ advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-256-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-256-01-EcoStruxure_Machine_SCADA_ExpertPro-face_BLUE_Open_Studio_Security_Notification.pdf advisory