Description
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that
could cause an interpretation of malicious payload data, potentially leading to remote code
execution when an attacker gets the user to open a malicious file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | IGSS Dashboard (DashBoard.exe) | v16.0.0.23130 and prior | — |
Advisories 2
- ICSA-23-220-01 Schneider Electric IGSS CISA ICS & IT advisories · Oct 12, 2023
- SEVD-2023-164-02 IGSS (Interactive Graphical SCADA System) Schneider Electric CPCERT · Jun 13, 2023