Security Advisory

CVE-2020-7489

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-04-22 18:15:57
Last updated 2026-05-28 20:30:39
Assigner schneider
CVSS score not scored
State PUBLISHED

Description

A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStruxure Machine Expert – Basic or SoMachine Basic programming software (versions in security notification). The result of this vulnerability, DLL substitution, could allow the transference of malicious code to the controller.