CVE-2020-7569CWE-434

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an…

published November 19, 2020

CVSS
—
EPSS
2%
Percentile
83.8
In the wild
Unconfirmed
What it is

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02392 · 83.8th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2020-11-19T21:02Z
EPSS history
Timeline
  • 19 NOV 21:02Z
    A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an…
    cvelistv5