VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 22, 2020· Updated Jun 17, 2026

CVE-2020-7490

CVE-2020-7490

Description

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.

Affected products

9
  • Schneider Electric/Vijeo Designer7 versions
    cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:-:*:*:*+ 6 more
    • cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:-:*:*:*range: <=6.2
    • cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:basic:*:*:*range: <=1.0
    • cpe:2.3:a:schneider-electric:vijeo_designer:1.1:-:*:*:basic:*:*:*
    • cpe:2.3:a:schneider-electric:vijeo_designer:1.1:hotfix_15:*:*:basic:*:*:*
    • cpe:2.3:a:schneider-electric:vijeo_designer:6.9:-:*:*:-:*:*:*
    • cpe:2.3:a:schneider-electric:vijeo_designer:6.9:sp9:*:*:-:*:*:*
    • (no CPE)range: <=V6.9 SP9
  • Schneider Electric/Vijeo Designer Basicdescription
  • Schneider Electric/Vijeo Designer Basicllm-fuzzy
    Range: <=V1.1 HotFix 15

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.