CVE-2023-3001
Assigner: schneider
Published: 2023-06-14T07:40:16.412Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: IGSS Dashboard (DashBoard.exe)
vendor: Schneider Electric
versions: status: affected
version: v16.0.0.23130 and prior
datePublic: 2023-06-13T07:37:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that
could cause an interpretation of malicious payload data, potentially leading to remote code
execution when an attacker gets the user to open a malicious file. 


value: 
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that
could cause an interpretation of malicious payload data, potentially leading to remote code
execution when an attacker gets the user to open a malicious file. 


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-502
description: CWE-502 Deserialization of Untrusted Data
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev