What’s Vulnerable › Vulnerabilities

CVE-2020-10626

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-05-14 · updated 2026-06-17
• Weakness: CWE-427

Description

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code.

Affected products

• Fazecast Jserialcomm: through 2.2.2
• Schneider Electric EcoStruxure IT Gateway: from 1.5.0.66 through 1.5.2.28; from 1.6.0.39 through 1.6.2.14; 1.7.0.64

References

• https://www.us-cert.gov/ics/advisories/ICSA2012601
• https://www.us-cert.gov/ics/advisories/ICSA2012601

Get alerted when CVE-2020-10626 or the next vulnerability affects your stack