High severity7.8NVD Advisory· Published Sep 16, 2020· Updated Jun 17, 2026
CVE-2020-7531
CVE-2020-7531
Description
A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.
Affected products
3cpe:2.3:a:schneider-electric:scadapack_7x_remote_connect:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schneider-electric:scadapack_7x_remote_connect:*:*:*:*:*:*:*:*range: <=3.6.3.574
- (no CPE)range: <=V3.6.3.574
- SCADAPack/SCADAPack 7x Remote Connectdescription
Patches
Vulnerability mechanics
References
1- www.se.com/ww/en/download/document/SEVD-2020-252-01/nvdVendor Advisory
News mentions
0No linked articles in our index yet.