Description
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory
Buffer vulnerability exists that could cause memory corruption when an authenticated user
opens a tampered log file from GP-Pro EX.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | GP-Pro EX WinGP for iPC | v4.09.450 and prior | — |
| Schneider Electric | GP-Pro EX WinGP for PC/AT | v4.09.450 and prior | — |
Advisories 1
- SEVD-2023-220-01 Pro-face GP-Pro EX Schneider Electric CPCERT · Aug 8, 2023