CVE-2020-7523

HIGH

7.8

Description

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityHIGH

Privileges RequiredLOW

User InteractionNONE

Published8/31/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

schneider-electric:modbus_driver_suiteschneider-electric:modbus_serial_driver

Weaknesses (CWE)

CWE-269

References

https://www.se.com/ww/en/download/document/SEVD-2020-224-01/(cybersecurity@se.com)

https://www.se.com/ww/en/download/document/SEVD-2020-224-01/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.