CVE-2020-7518: Schneider Electric Easergy Builder

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A CWE-20: Improper input validation vulnerability exists in Easergy Builder (Version 1.4.7.2 and older) which could allow an attacker to modify project configuration files.

Affected products

• Schneider Electric Easergy Builder: up to and including 1.4.7.2

Published 2020-07-23. Last modified 2026-06-17.