Skip to content
OpenAdvisories
High · 7.1 CVE-2022-32521 EUVD-2022-35592GHSA-vj7v-2rfm-6p53

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely…

Published Jan 30, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: Data Center Expert Category: ICS / OT

Description

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Affected products

VendorProductAffectedFixed
Schneider Electric Data Center Expert All – < V7.9.0 V7.9.0

Advisories 1

References