VULNERABILITY INTELLIGENCE
CVE-2020-7490
CVSS score7.8 HIGH
EPSS probability0.46%
CISA KEVNot currently listed
Published2020-04-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.
Weakness classification
- CWE-426: Untrusted Search Path
Primary references
- cybersecurity@se.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory