CVE-2020-7544: Schneider Electric Operator Terminal Expert Runtime

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert.

Affected products

• Schneider Electric Operator Terminal Expert Runtime: before 3.1 (fixed in 3.1); version 3.1 only

Published 2020-11-19. Last modified 2026-06-17.