CVE-2020-7494

Name of the Vulnerable Software and Affected Versions EcoStruxure Operator Terminal Expert versions 3.1 Service Pack 1 and prior

Description A path traversal issue exists, which could lead to malicious code execution when opening a project file. This is due to improper limitation of a pathname to a restricted directory.

Recommendations For EcoStruxure Operator Terminal Expert versions 3.1 Service Pack 1 and prior, update to a version that addresses this issue to prevent malicious code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.