CVE-2020-7476: Schneider Electric Ulti Zigbee Installation Toolkit

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit (Versions prior to 1.0.1), which could cause execution of malicious code when a malicious file is put in the search path.

Affected products

• Schneider Electric Ulti Zigbee Installation Toolkit: before 1.0.1 (fixed in 1.0.1)

Published 2020-03-23. Last modified 2026-06-17.