CVE-2020-7569: Schneider Electric Webreports

High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days.

A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause an authenticated remote user being able to upload arbitrary files due to incorrect verification of user supplied files and achieve remote code execution.

Affected products

• Schneider Electric Webreports: from 1.9, up to and including 3.1

Published 2020-11-19. Last modified 2026-06-17.