CVE-2020-7489

Publication date

2020-04-22 18:15:57

Family

schneider

State

PUBLISHED

Description

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.