Schneider Electric EcoStruxure Power Monitoring Expert and Power Operation Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : EcoStruxure Power Monitoring Expert, EcoStruxure Power Operation with Advanced Reports, EcoStruxure Power SCADA Operation with Advanced Reports Vulnerability :...

CVE-2023-5391

creationtimestamp| type| source ---|---|--- 2023-10-04 22:12:02+00:00| seen| https://t.me/cibsecurity/71616...

CVE-2023-5391

CVE-2023-5391 describes a CWE-502 deserialization of untrusted data vulnerability that could allow remote code execution. Affected products (Schneider Electric) include EcoStruxure Power Monitoring Expert ( PME ) and EcoStruxure Power Operation with Advanced Reports (and EcoStruxure Power SCADA O...

CVE-2023-5391

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application...