CVE-2020-7474CWE-427

CVE-2020-7474: vulnerability in ProSoft Configurator v1.002 and prior, for the…

Published · Updated

Follow this CVE+ Monitor ProSoft Configurator v1.002 and prior, for the PMEPXM0100 module

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.4%
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002 and prior), for the PMEPXM0100 (H) module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL.
Affected products
n/a · ProSoft Configurator v1.002 and prior, for the PMEPXM0100 (H) module