Skip to content
Sign in
7.3 High

CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…

Description

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.

Affected products and versions

Product Affected versions Fixed in
EcoStruxure Power Monitoring Expert (PME) Versions not published
ecostruxure_power_monitoring_expert 2022 earliest → < 2022 2022

Other CVEs of EcoStruxure Power Monitoring Expert (PME)

The 3 CVEs of EcoStruxure Power Monitoring Expert (PME) →
CVE-2023-5987 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could… 6.1 Medium CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability… 8.2 High
Track this CVE