CVE-2020-10632

Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an unpredictable manner.

• CWE-282

• https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-20-140-02Mitigation, Third Party Advisory, US Government Resource

Published

Feb 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10627Insulet Omnipod Insulin Management System insulin pump produ…8.1
• CVE-2020-10628ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101…7.5
• CVE-2020-10629WebAccess/NMS (versions prior to 3.0.2) does not sanitize XM…7.5
• CVE-2020-1063A cross site scripting vulnerability exists when Microsoft D…5.4
• CVE-2020-10630SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The softwa…6.1
• CVE-2020-10631An attacker could use a specially crafted URL to delete or r…9.8
• CVE-2020-10633A non-persistent XSS (cross-site scripting) vulnerability ex…6.1
• CVE-2020-10634SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A speciall…9.1
• CVE-2020-10635Simulation models for KUKA.Sim Pro version 3.1 are hosted by…4.3
• CVE-2020-10636Inadequate encryption may allow the passwords for Emerson Op…7.5
• CVE-2020-10637Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.0…5.5
• CVE-2020-10638Advantech WebAccess Node, Version 8.4.4 and prior, Version 9…9.8