A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) | affected |
|
Configuration 1 [-]
|
No data.
No data.
Subscriptions
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-28620 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2020-133-04 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: schneider
Published:
Updated: 2024-08-04T09:33:19.527Z
Reserved: 2020-01-21T00:00:00.000Z
Link: CVE-2020-7495
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-06-16T20:15:14.457
Modified: 2024-11-21T05:37:15.467
Link: CVE-2020-7495
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses