CVE-2020-7474

7.8 highEPSS 0.4%

High (7.8) in schneider-electric pmepxm0100 prosoft configurator. EPSS 0.4% chance of exploitation in the next 30 days.

A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2020-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:pmepxm0100_prosoft_configurator

References

https://www.se.com/ww/en/download/document/SEVD-2020-042-01/
https://www.se.com/ww/en/download/document/SEVD-2020-042-01/

Check your stack JSON