Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-7491 State: PUBLISHED Published: 2020-07-23T20:46:44 Last Updated: 2024-08-04T09:33:19.483Z Vendors: n/a Products: Tricon system versions 10.2.0 through 10.5.3 Problem Types: Unauthorized access Description: **VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy debug port account in TCMs installed in Tricon system versions 10.2.0 through 10.5.3 is visible on the network and could allow inappropriate access. This vulnerability was remediated in TCM version 10.5.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SESB-2020-105-01/ - https://us-cert.cisa.gov/ics/advisories/icsa-20-205-01
CVE ID: CVE-2020-7492 State: PUBLISHED Published: 2020-06-16T19:07:45 Last Updated: 2024-08-04T09:33:19.474Z Vendors: n/a Products: GP-Pro EX V1.00 to V4.09.100 Problem Types: CWE-521 Description: A CWE-521: Weak Password Requirements vulnerability exists in the GP-Pro EX V1.00 to V4.09.100 which could cause the discovery of the password when the user is entering the password because it is not masqueraded. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-01/
CVE ID: CVE-2020-7493 State: PUBLISHED Published: 2020-06-16T19:10:35 Last Updated: 2024-08-04T09:33:19.454Z Vendors: n/a Products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) Problem Types: CWE-89 Description: A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE ID: CVE-2020-7494 State: PUBLISHED Published: 2020-06-16T19:11:04 Last Updated: 2024-08-04T09:33:19.469Z Vendors: n/a Products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE ID: CVE-2020-7495 State: PUBLISHED Published: 2020-06-16T19:11:55 Last Updated: 2024-08-04T09:33:19.527Z Vendors: n/a Products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/downlo
ening the project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE ID: CVE-2020-7496 State: PUBLISHED Published: 2020-06-16T19:13:29 Last Updated: 2024-08-04T09:33:19.584Z Vendors: n/a Products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) Problem Types: CWE-88 Description: A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening the project file. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE ID: CVE-2020-7497 State: PUBLISHED Published: 2020-06-16T19:13:57 Last Updated: 2024-08-04T09:33:19.521Z Vendors: n/a Products: EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause arbitrary application execution when the computer starts. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-04
CVE ID: CVE-2020-7498 State: PUBLISHED Published: 2020-06-16T19:15:24 Last Updated: 2024-08-04T09:33:19.631Z Vendors: n/a Products: Unity Loader and OS Loader Software (All versions) Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists in the Unity Loader and OS Loader Software (all versions). The fixed credentials are used to simplify file transfer. Today the use of fixed credentials is considered a vulnerability, which could cause unauthorized access to the file transfer service provided by the Modicon PLCs. This could result in various unintended results. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/
n various unintended results. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-02
CVE ID: CVE-2020-7499 State: PUBLISHED Published: 2020-06-16T19:16:53 Last Updated: 2024-08-04T09:33:19.565Z Vendors: n/a Products: U.motion Servers and Touch Panels (affected versions listed in the security notification) Problem Types: CWE-863 Description: A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause unauthorized access when a low privileged user makes unauthorized changes. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-03/
CVE ID: CVE-2020-7500 State: PUBLISHED Published: 2020-06-16T19:21:54 Last Updated: 2024-08-04T09:33:19.594Z Vendors: n/a Products: U.motion Servers and Touch Panels (affected versions listed in the security notification) Problem Types: CWE-89 Description: A CWE-89:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in U.motion Servers and Touch Panels (affected versions listed in the security notification) which could cause arbitrary code to be executed when a malicious command is entered. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-03/
CVE ID: CVE-2020-7501 State: PUBLISHED Published: 2020-06-16T19:40:23 Last Updated: 2024-08-04T09:33:19.899Z Vendors: n/a Products: Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 16 and prior) and Vijeo Designer (V6.2 SP9 and prior) which could cause unauthorized read and write when downloading and uploading project or firmware into Vijeo Designer Basic and Vijeo Designer. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-133-02/
CVE ID: CVE-2020-7502 State: PUBLISHED Published: 2020-06-16T19:41:18 Last Updated: 2024-08-04T09:33:19.594Z Vendors: n/a Products: Modicon M218 Logic Controller (Firmware version 4.3 and prior) Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (Firmware version 4.3 and prior), which may cause a Denial of Service when specific TCP/IP crafted packets are sent to the Modicon M218 Logic Controller. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-01
CVE ID: CVE-2020-7503 State: PUBLISHED Published: 2020-06-16T19:42:10 Last Updated: 2024-08-04T09:33:19.532Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-352 Description: A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to execute malicious commands on behalf of a legitimate user when xsrf-token data is intercepted. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7504 State: PUBLISHED Published: 2020-06-16T19:42:25 Last Updated: 2024-08-04T09:33:19.532Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-20 Description: A CWE-20: Improper Input Validation vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to disable the webserver service on the device when specially crafted network packets are sent. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7505 State: PUBLISHED Published: 2020-06-16T19:42:41 Last Updated: 2024-08-04T09:33:19.896Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-494 Description: A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7506 State: PUBLISHED Published: 2020-06-16T19:43:23 Last Updated: 2024-08-04T09:33:19.664Z Vendors: n/a Products: Easergy T300 Firmware V1.5.2 and prior Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in Easergy T300, Firmware V1.5.2 and prior, which could allow an attacker to pack or unpack the archive with the firmware for the controller and modules using the usual tar archiver resulting in an information exposure. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-04
CVE ID: CVE-2020-7507 State: PUBLISHED Published: 2020-06-16T19:43:47 Last Updated: 2024-08-04T09:33:19.480Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-400 Description: A CWE-400: Uncontrolled Resource Consumption vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to login multiple times resulting in a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7508 State: PUBLISHED Published: 2020-06-16T19:44:18 Last Updated: 2024-08-04T09:33:19.492Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-307 Description: A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to gain full access by brute force. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7509 State: PUBLISHED Published: 2020-06-16T19:44:37 Last Updated: 2024-08-04T09:33:19.520Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-269 Description: A CWE-269: Improper privilege management (write) vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to elevate their privileges and delete files. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7510 State: PUBLISHED Published: 2020-06-16T19:44:55 Last Updated: 2024-08-04T09:33:19.650Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-200 Description: A CWE-200: Information Exposure vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow attacker to obtain private keys. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7511 State: PUBLISHED Published: 2020-06-16T19:45:13 Last Updated: 2024-08-04T09:33:19.495Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-327 Description: A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to acquire a password by brute force. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7512 State: PUBLISHED Published: 2020-06-16T19:45:22 Last Updated: 2024-08-04T09:33:19.450Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-1103 Description: A CWE-1103: Use of Platform-Dependent Third Party Components with vulnerabilities vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to exploit the component. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7513 State: PUBLISHED Published: 2020-06-16T19:45:31 Last Updated: 2024-08-04T09:33:19.702Z Vendors: n/a Products: Easergy T300 (Firmware version 1.5.2 and older) Problem Types: CWE-312 Description: A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy T300 (Firmware version 1.5.2 and older) which could allow an attacker to intercept traffic and read configuration data. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-04
CVE ID: CVE-2020-7514 State: PUBLISHED Published: 2020-07-23T20:46:54 Last Updated: 2024-08-04T09:33:19.417Z Vendors: n/a Products: Easergy Builder (Version 1.4.7.2 and older) Problem Types: CWE-327 Description: A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker access to the authorization credentials for a device and gain full access. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-05
CVE ID: CVE-2020-7515 State: PUBLISHED Published: 2020-07-23T20:47:02 Last Updated: 2024-08-04T09:33:19.940Z Vendors: n/a Products: Easergy Builder V1.4.7.2 and prior Problem Types: CWE-798 Description: A CWE-321: Use of hard-coded cryptographic key stored in cleartext vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker to decrypt a password. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-05
CVE ID: CVE-2020-7516 State: PUBLISHED Published: 2020-07-23T20:47:11 Last Updated: 2024-08-04T09:33:19.615Z Vendors: n/a Products: Easergy Builder V1.4.7.2 and prior Problem Types: CWE-312 Description: A CWE-316: Cleartext Storage of Sensitive Information in Memory vulnerability exists in Easergy Builder V1.4.7.2 and prior which could allow an attacker access to login credentials. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2020-161-05
CVE ID: CVE-2020-7517 State: PUBLISHED Published: 2020-07-23T20:47:20 Last Updated: 2024-08-04T09:33:19.790Z Vendors: n/a Products: Easergy Builder (Version 1.4.7.2 and older) Problem Types: CWE-312 Description: A CWE-312: Cleartext Storage of Sensitive Information vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to read user credentials. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-05
CVE ID: CVE-2020-7518 State: PUBLISHED Published: 2020-07-23T20:51:30 Last Updated: 2024-08-04T09:33:19.592Z Vendors: n/a Products: Easergy Builder (Version 1.4.7.2 and older) Problem Types: CWE-20 Description: A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-05
CVE ID: CVE-2020-7519 State: PUBLISHED Published: 2020-07-23T20:51:41 Last Updated: 2024-08-04T09:33:19.491Z Vendors: n/a Products: Easergy Builder (Version 1.4.7.2 and older) Problem Types: CWE-521 Description: A CWE-521: Weak Password Requirements vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to compromise a user account. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-161-05
CVE ID: CVE-2020-7520 State: PUBLISHED Published: 2020-07-23T20:46:33 Last Updated: 2024-08-04T09:33:19.592Z Vendors: n/a Products: Schneider Electric Software Update (SESU) V2.4.0 and prior. Problem Types: CWE-601 Description: A CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability exists in Schneider Electric Software Update (SESU), V2.4.0 and prior, which could cause execution of malicious code on the victim's machine. In order to exploit this vulnerability, an attacker requires privileged access on the engineering workstation to modify a Windows registry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middl
istry key which would divert all traffic updates to go through a server in the attacker's possession. A man-in-the-middle attack is then used to complete the exploit. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-196-01/
CVE ID: CVE-2020-7521 State: PUBLISHED Published: 2020-08-31T16:10:12 Last Updated: 2024-08-04T09:33:19.645Z Vendors: n/a Products: SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `FileUploadServlet` which may lead to uploading executable files to non-specified directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-04/
CVE ID: CVE-2020-7522 State: PUBLISHED Published: 2020-08-31T16:10:50 Last Updated: 2024-08-04T09:33:19.670Z Vendors: n/a Products: SFAPV9601 - APC Easy UPS On-Line Software V2.0 and earlier Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in SFAPV9601 - APC Easy UPS On-Line Software (V2.0 and earlier) when accessing a vulnerable method of `SoundUploadServlet` which may lead to uploading executable files to non-specified directories. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-04/
CVE ID: CVE-2020-7523 State: PUBLISHED Published: 2020-08-31T16:11:46 Last Updated: 2024-08-04T09:33:19.426Z Vendors: n/a Products: Schneider Electric Modbus Serial Driver (64 bits) versions prior to V3.20 IE 30, Schneider Electric Modbus Serial Driver (32 bits) versions prior to V2.20 IE 30, and Schneider Electric Modbus Driver Suite versions prior to V14.15.0.0 Problem Types: CWE-269 Description: Improper Privilege Management vulnerability exists in Schneider Electric Modbus Serial Driver (see security notification for versions) which could cause local privilege escalation when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privile
n when the Modbus Serial Driver service is invoked. The driver does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-01/
CVE ID: CVE-2020-7524 State: PUBLISHED Published: 2020-08-31T16:12:25 Last Updated: 2024-08-04T09:33:19.475Z Vendors: n/a Products: Modicon M218 Logic Controller V5.0.0.7 and prior Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability exists in Modicon M218 Logic Controller (V5.0.0.7 and prior) which could cause Denial of Service when sending specific crafted IPV4 packet to the controller: Sending a specific IPv4 protocol package to Schneider Electric Modicon M218 Logic Controller can cause IPv4 devices to go down. The device does not work properly and must be powered back on to return to normal. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.
be powered back on to return to normal. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-03/
CVE ID: CVE-2020-7525 State: PUBLISHED Published: 2020-08-31T16:12:54 Last Updated: 2024-08-04T09:33:19.923Z Vendors: n/a Products: All hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) Problem Types: CWE-307 Description: Improper Restriction of Excessive Authentication Attempts vulnerability exists in all hardware versions of spaceLYnk and Wiser for KNX (formerly homeLYnk) which could allow an attacker to guess a password when brute force is used. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-02/
CVE ID: CVE-2020-7526 State: PUBLISHED Published: 2020-08-31T16:13:23 Last Updated: 2024-08-04T09:33:19.487Z Vendors: n/a Products: PowerChute Business Edition software V9.0.x and earlier Problem Types: CWE-20 Description: Improper Input Validation vulnerability exists in PowerChute Business Edition (software V9.0.x and earlier) which could cause remote code execution when a script is executed during a shutdown event. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-05/
CVE ID: CVE-2020-7527 State: PUBLISHED Published: 2020-08-31T16:13:54 Last Updated: 2024-08-04T09:33:19.566Z Vendors: n/a Products: SoMove V2.8.1 and prior Problem Types: CWE-276 Description: Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-224-07/
CVE ID: CVE-2020-7528 State: PUBLISHED Published: 2020-09-16T15:39:38 Last Updated: 2024-08-04T09:33:19.990Z Vendors: n/a Products: SCADAPack 7x Remote Connect V3.6.3.574 and prior. Problem Types: CWE-502 Description: A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arbitrary code execution when an attacker builds a custom .PRJ file containing a malicious serialized buffer. Additional Analyst Notes: - CVE Program Container: References: - https://www.se.com/ww/en/download/document/SEVD-2020-252-01/