CVE-2020-7520

CVE-2020-7520 describes an Open Redirect vulnerability (CWE-601) in Schneider Electric Software Update (SESU) V2.4.0 and prior. This flaw could lead to the execution of malicious code on a victim's machine. Exploitation requires an attacker to have privileged access to modify a Windows registry key on the engineering workstation, diverting update traffic through an attacker-controlled server, followed by a man-in-the-middle attack. The vulnerability is rated Medium with a CVSS v3.1 score of 4.7, indicating a network attack vector with high attack complexity and user interaction required, resulting in low impact on confidentiality and integrity. Its EPSS score is very low, suggesting a minimal likelihood of exploitation in the wild. Currently, there is no known active exploitation, nor is public exploit code available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are also absent, further indicating a lack of widespread attention or exploitation.