What is CVE-2020-7527?

CVE-2020-7527 is a high-severity vulnerability in Schneider-electric Somove, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-08-31.

How severe is CVE-2020-7527?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Schneider-electric Somove

CVE-2020-7527

Incorrect Default Permission vulnerability exists in SoMove (V2.8.1) and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script i…

EPSS: 0.003 (25.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Schneider-electric Somove
N/a Somove V2.8.1 And Prior — versions SoMove V2.8.1 and prior

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-7527?: CVE-2020-7527 is a high-severity vulnerability in Schneider-electric Somove, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2020-08-31.
How severe is CVE-2020-7527?: High severity. CVSS v3 base score is 7.8 out of 10.