Schneider Electric IGSS UpdateService Exposed Dangerous Method Local Privilege Escalation Vulnerability
🗓️ 14 Aug 2023 00:00:00Reported by Sina Kheirkhah (@SinSinology) of Summoning Team (@SummoningTeam)Type 
zdi🔗 www.zerodayinitiative.com👁 39 Views
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | Dashboard.exe Code Execution | 20 Jun 202300:00 | – | bdu_fstec |
 | Schneider Electric IGSS code-related vulnerabilities | 14 Jun 202300:00 | – | cnnvd |
 | CVE-2023-3001 | 14 Jun 202307:40 | – | cve |
 | CVE-2023-3001 | 14 Jun 202307:40 | – | cvelist |
 | EUVD-2023-43694 | 3 Oct 202520:07 | – | euvd |
 | Schneider Electric IGSS | 8 Aug 202306:00 | – | ics |
 | CVE-2023-3001 | 14 Jun 202308:15 | – | nvd |
 | CVE-2023-3001 | 14 Jun 202308:15 | – | osv_cve |
 | Deserialization of untrusted data | 14 Jun 202308:15 | – | prion |
 | PT-2023-3139 · Schneider Electric · Igss | 13 Jun 202300:00 | – | ptsecurity |
10
| Source | Link |
|---|---|
| cisa | www.cisa.gov/news-events/ics-advisories/icsa-23-220-01 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
14 Aug 2023 00:00Current
6.9Medium risk
Vulners AI Score6.9
CVSS 37.8
EPSS0.31861