QwikSec

Security Database

CVE

CWE

Training

CVE-2020-7529

Published: Sep 16, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place content in any unprotected folder on the target system using a crafted .RCZ file.

Vendor	Product	Versions
n/a	SCADAPack 7x Remote Connect V3.6.3.574 and prior.	affected `SCADAPack 7x Remote Connect V3.6.3.574 and prior.`

Weaknesses (CWE)

References

https://www.se.com/ww/en/download/document/SEVD-2020-252-01/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.