CVE-2023-5391 (published 2023-10-04T18:13:00.746Z)



A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to
execute arbitrary code on the targeted system by sending a specifically crafted packet to the
application.





Affected products: Vendor: Schneider Electric
Product: EcoStruxure Power Monitoring Expert
Versions: All versions – prior to application of Hotfix-145271