What’s Vulnerable › Vulnerabilities

CVE-2020-7545

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-12-01 · updated 2026-06-17
• Weakness: CWE-284

Description

A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software (see security notification for version information) that could allow for arbitrary code execution on the server when an authorized user access an affected webpage.

Affected products

• Schneider-Electric Ecostruxure Energy Expert: 2.0
• EcoStruxure Power Monitoring Expert (Versions 2020 and prior): 7.0, 8.0, 9.0
• Schneider-Electric Power Manager: 1.1, 1.2, 1.3
• Schneider-Electric Powerscada Expert With Advanced Reporting And Dashboards: 8.0
• Schneider-Electric Powerscada Operation With Advanced Reporting And Dashboards: 9.0

References

• https://www.se.com/ww/en/download/document/SEVD-2020-287-04/
• https://www.se.com/ww/en/download/document/SEVD-2020-287-04/

Get alerted when CVE-2020-7545 or the next vulnerability affects your stack