9.8
Critical
CVE-2023-5391 A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code…
Description
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Power Monitoring Expert | Versions not published | |
| EcoStruxure Power Operation (EPO) with Advanced Reports | Versions not published | |
| EcoStruxure Power SCADA Operation with Advanced Reports | Versions not published |