Description
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker
logged in with a user level account to gain higher privileges by providing a harmful serialized
object.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Easergy Studio | All – ≤ <=9.3.5 | — |
Advisories 2
- ICSA-24-011-05 Schneider Electric Easergy Studio CISA ICS & IT advisories · Jan 11, 2024
- SEVD-2024-009-02 Easergy Studio Schneider Electric CPCERT · Jan 9, 2024