CVE-2020-7481: Schneider Electric Andover Continuum 5720 Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could enable a successful Cross-site Scripting (XSS attack) when using the products' web server.

Affected products

• Schneider Electric Andover Continuum 5720 Firmware: any version
• Schneider Electric Andover Continuum 5740 Firmware: any version
• Schneider Electric Andover Continuum 9200 Firmware: any version
• Schneider Electric Andover Continuum 9680 Firmware: any version
• Schneider Electric Andover Continuum 9702 Firmware: any version
• Schneider Electric Andover Continuum 9900 Firmware: any version
• Schneider Electric Andover Continuum 9924 Firmware: any version
• Schneider Electric Andover Continuum 9940 Firmware: any version
• Schneider Electric Andover Continuum 9941 Firmware: any version
• Schneider Electric Andover Continuum BCX4040 Firmware: any version
• Schneider Electric Andover Continuum BCX9640 Firmware: any version

Published 2020-03-23. Last modified 2026-06-17.