Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2020-7480 Details
Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an application's processing of XML data.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.se.com/ww/en/download/document/SEVD-2020-070-04/ | CVE | Vendor Advisory |
| https://www.se.com/ww/en/download/document/SEVD-2020-070-04/ | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| schneider-electric andover continuum 9680 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9680 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 5740 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 5740 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 5720 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 5720 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum bcx4040 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum bcx4040 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum bcx9640 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum bcx9640 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9900 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9900 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9940 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9940 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9941 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9941 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9924 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9924 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9702 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9702 | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9200 firmware | All versions |
CPE
Remediation
| |
| schneider-electric andover continuum 9200 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 25, 2020 | Initial Analysis | [email protected] |