VULNERABILITY INTELLIGENCE

CVE-2020-7557

CVSS score7.8 HIGH

EPSS probability2.50%

CISA KEVNot currently listed

Published2020-11-19

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition.

Weakness classification

cybersecurity@se.com: CWE-125

Primary references

cybersecurity@se.com — Vendor Advisory
cybersecurity@se.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry