CVE-2020-7480 CRITICAL

Published: 2020-03-23 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.

Additional Descriptions (1)

Una CWE-94: Se presenta una vulnerabilidad de Control Inapropiado de la Generación de Código ("Inyección de código") en Andover Continuum (Todas las versiones), lo que podría causar que los archivos en el sistema de archivos del servidor de aplicaciones sean visibles cuando un atacante interfiere con el procesamiento de datos XML de una aplicación.

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector	NETWORK
Attack Complexity	LOW
Privileges Required	NONE
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 5.9

Base Score: 7.5 (HIGH)

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector	NETWORK
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 10.0

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-94
[email protected]	Primary	en CWE-94

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	andover_continuum_9680_firmware	*	<built-in method update of dict object at 0x7e60eb224840>	Operating System
schneider-electric	andover_continuum_5740_firmware	*	<built-in method update of dict object at 0x7e60eb224fc0>	Operating System
schneider-electric	andover_continuum_5720_firmware	*	<built-in method update of dict object at 0x7e6110a57b40>	Operating System
schneider-electric	andover_continuum_bcx4040_firmware	*	<built-in method update of dict object at 0x7e60eb226000>	Operating System
schneider-electric	andover_continuum_bcx9640_firmware	*	<built-in method update of dict object at 0x7e60eb225c00>	Operating System
schneider-electric	andover_continuum_9900_firmware	*	<built-in method update of dict object at 0x7e60eb226a00>	Operating System
schneider-electric	andover_continuum_9940_firmware	*	<built-in method update of dict object at 0x7e60bb915340>	Operating System
schneider-electric	andover_continuum_9941_firmware	*	<built-in method update of dict object at 0x7e60bb916e00>	Operating System
schneider-electric	andover_continuum_9924_firmware	*	<built-in method update of dict object at 0x7e60eb225a80>	Operating System
schneider-electric	andover_continuum_9702_firmware	*	<built-in method update of dict object at 0x7e60eb225840>	Operating System
schneider-electric	andover_continuum_9200_firmware	*	<built-in method update of dict object at 0x7e60bb9151c0>	Operating System

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9680_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9680:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_5740_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_5740:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_5720_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_5720:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_bcx4040_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_bcx4040:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_bcx9640_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_bcx9640:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9900_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9900:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9940_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9940:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9941_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9941:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9924_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9924:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9702_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9702:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:andover_continuum_9200_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:andover_continuum_9200:-:::::::*`

References

https://www.se.com/ww/en/download/document/SEVD-2020-070-04/
Source: [email protected]

Vendor Advisory
https://www.se.com/ww/en/download/document/SEVD-2020-070-04/
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory