CVE-2020-7560

8.6 highEPSS 1.4%

High (8.6) in schneider-electric. EPSS 1.4% chance of exploitation in the next 30 days.

A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions), that could cause a crash of the software or unexpected code execution when opening a malicious file in EcoStruxure™ Control Expert software.

Severity

CVSS 3.1

8.6 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-123
Published: 2020-12-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

schneider-electric:ecostruxure_control_expert
schneider-electric:unity_pro

References

https://www.se.com/ww/en/download/document/SEVD-2020-343-01/
https://www.se.com/ww/en/download/document/SEVD-2020-343-01/

Check your stack JSON