CVE-2020-7528CWE-502

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code…

published September 16, 2020

CVSS
—
EPSS
1%
Percentile
71.4
In the wild
Unconfirmed
What it is

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01357 · 71.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2020-09-16T15:39Z
EPSS history
Timeline
  • 16 SEP 15:39Z
    A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code…
    cvelistv5