Security Advisory
CVE-2020-7489
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.