High severity7.8NVD Advisory· Published Aug 31, 2020· Updated Jun 17, 2026
CVE-2020-7523
CVE-2020-7523
Description
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected products
5- cpe:2.3:a:schneider-electric:modbus_driver_suite:*:*:*:*:*:*:*:*Range: <14.15.0.0
cpe:2.3:a:schneider-electric:modbus_serial_driver:*:*:*:*:*:*:x64:*+ 2 more
- cpe:2.3:a:schneider-electric:modbus_serial_driver:*:*:*:*:*:*:x64:*range: <3.20_ie_30
- cpe:2.3:a:schneider-electric:modbus_serial_driver:*:*:*:*:*:*:x86:*range: <2.20_ie_30
- (no CPE)
- Schneider Electric/Modbus Serial Driverdescription
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-224-01/nvdVendor Advisory
News mentions
0No linked articles in our index yet.