CVE-2020-7523CWE-269

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local…

published August 31, 2020

CVSS
—
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2020-08-31T16:11Z
EPSS history
Timeline
  • 31 AUG 16:11Z
    Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local…
    cvelistv5