VDB
CVE-2020-7564
CVE-2020-7564
PUBLISHED
De multiples vulnérabilités ont été découvertes dans les produits Schneider. Elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service et une atteinte à la confidentialité des données.
EPSS 1.14% · 65.5th percentile
Risk Scores
EPSS Score
1.14%
65.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | N/A | |
| N/A | N/A | |
| Schneider Electric | Modicon M340 |
Timeline
- Nov 12, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Dec 29, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 11, 2022 EPSS Score
References
- https://cert.ssi.gouv.fr/avis/CERTFR-2020-AVI-726/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-05/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-03/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-07/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-01/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-04/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-06/ advisory
- https://www.se.com/ww/en/download/document/SEVD-2020-315-02/ advisory
- https://www.se.com/ww/en/download/document/SESB-2020-315-01/ advisory
- https://cert.ssi.gouv.fr/avis/CERTFR-2022-AVI-815/ advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-256-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-256-01-EcoStruxure_Machine_SCADA_ExpertPro-face_BLUE_Open_Studio_Security_Notification.pdf advisory