Description
Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Schneider Electric Modbus Serial Driver (64 bits) versions prior to V3.20 IE 30, Schneider Electric Modbus Serial Driver (32 bits) versions prior to V2.20 IE 30, and Schneider Electric Modbus Driver Suite versions prior to V14.15.0.0 | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-28648 | Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |
References
| Link | Providers |
|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2020-224-01/ |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: schneider
Published:
Updated: 2024-08-04T09:33:19.426Z
Reserved: 2020-01-21T00:00:00.000Z
Link: CVE-2020-7523
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-08-31T17:15:12.373
Modified: 2024-11-21T05:37:18.530
Link: CVE-2020-7523
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses