CVE-2020-7547: schneider-electric ecostruxure energy expert…

csirt@kutim:~/threat-intel/cve/CVE-2020-7547

CVSS 8.8 · High EPSS 1,3%

Kerentanan Improper Access Control pada schneider-electric ecostruxure energy expert, schneider-electric ecostruxure power monitoring expert +3 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

A CWE-284: Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow a user the ability to perform actions via the web interface at a higher privilege level.

Rincian

Terbit di NVD: 1 Desember 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-284: Improper Access Control
EPSS (30 hari): 1,3% peluang dieksploitasi; lebih tinggi dari 69,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
schneider-electric	ecostruxure energy expert	Versi 2.0
schneider-electric	ecostruxure power monitoring expert	Versi 7.0
schneider-electric	ecostruxure power monitoring expert	Versi 8.0
schneider-electric	ecostruxure power monitoring expert	Versi 9.0
schneider-electric	power manager	Versi 1.1
schneider-electric	power manager	Versi 1.2
schneider-electric	power manager	Versi 1.3
schneider-electric	powerscada expert with advanced reporting and dashboards	Versi 8.0
schneider-electric	powerscada operation with advanced reporting and dashboards	Versi 9.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.se.com/ww/en/download/document/SEVD-2020-287-04/ advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.