7.3 Élevée

CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…

Description

CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
EcoStruxure Power Monitoring Expert (PME)	Versions non publiées
ecostruxure_power_monitoring_expert 2022	premières → < 2022	2022

Les 3 CVE de EcoStruxure Power Monitoring Expert (PME) →

CVE-2023-5987 A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability that could… 6.1 Moyenne CVE-2023-5986 A CWE-601 URL Redirection to Untrusted Site vulnerability exists that could cause an openredirect vulnerability… 8.2 Élevée

Vous utilisez EcoStruxure Power Monitoring Expert (PME) ?

Suivre cette CVE Surveiller EcoStruxure Power Monitoring Expert (PME) Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2024-9005

Chronologie

Publiée 8 octobre 2024
Dernière modification 25 mars 2025

Références

download.schneider-electric.com download.schneider-electric.com

Suivre cette CVE

CVE-2024-9005 CWE-502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…

Description

Produits et versions touchés

Autres CVE de EcoStruxure Power Monitoring Expert (PME)