The vulnerabilities of software for network design, calculation of electrical network parameters, and procurement of EcoStruxure Power Design/Ecodial (formerly Ecodial) equipment relate to shortcomings in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of software for designing electrical power networks, calculating network electrical parameters, and selecting equipment for EcoStruxure Power Design/Ecodial formerly Ecodial stems from deficiencies in the deserialization mechanism during file loading. Exploiting this vulnerabili...