9.8
Critique
CVE-2023-5391 A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code…
Description
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure Power Monitoring Expert | Versions non publiées | |
| EcoStruxure Power Operation (EPO) with Advanced Reports | Versions non publiées | |
| EcoStruxure Power SCADA Operation with Advanced Reports | Versions non publiées |