CVE-2020-7531

Summary

A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.

Affected Software

VendorProductVersion RangeStatus
n/aSCADAPack 7x Remote Connect V3.6.3.574 and prior.SCADAPack 7x Remote Connect V3.6.3.574 and prior.affected

Weaknesses

  • CWE-284: CWE-284 Improper Access Control

ADP Enrichment

CVE Program Container

Additional References

References