Vulnerability in Microsoft Windows
CVE-2020-28209
A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any local Windows user who has write permission on at least one of the subfolders of the Connect Agent service binary path, being able to gain the privilege of the user who started the service. By default, the Enterprise Server and Enterprise Central is always installed at a location requiring Administrator privileges so the vulnerability is only valid if the application has been installed on a non-secure location.
EPSS: 0.003 (19.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.0 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Windows
- Schneider-electric Enterprise_server_installer
- N/a Ecostruxure Building Operation Enterprise Server Installer V1.9 - V3.1 And Central V2.0 — versions EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1
Weakness classification (CWE)
References
- cybersecurity@se.com (Product, Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-28209?
- CVE-2020-28209 is a high-severity vulnerability in Microsoft Windows, classified under Unquoted Search Path or Element. CVSS score: 7.0/10. Published 2020-11-19.
- How severe is CVE-2020-28209?
- High severity. CVSS v3 base score is 7.0 out of 10.