CVE-2020-7532CWE-502

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code…

published September 16, 2020

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01363 · 71.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2020-09-16T15:40Z
EPSS history
Timeline
  • 16 SEP 15:40Z
    A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code…
    cvelistv5