Schneider Electric Easergy Studio

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Schneider Electric Equipment : Easergy Studio Vulnerability : Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain full control of a...

CVE-2023-7032

creationtimestamp| type| source ---|---|--- 2024-01-09 21:27:31+00:00| seen| https://t.me/ctinow/165373 2024-01-27 04:41:23+00:00| seen| https://t.me/ctinow/174620 2024-02-11 13:08:53+00:00| seen| https://t.me/arpsyndicate/3379...

CVE-2023-7032

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object...

CVE-2023-7032

Schneider Electric Easergy Studio is affected by CVE-2023-7032, a CWE-502 deserialization of untrusted data flaw. Versions prior to 9.3.5 allow a user-level attacker to escalate privileges by submitting a harmful serialized object, potentially gaining SYSTEM-level code execution on the host. The ...