Skip to content
OpenAdvisories
High · 7.8 CVE-2024-12703 EUVD-2024-51061GHSA-h4f2-rjw2-w3jj

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote …

Published Jan 17, 2025 · Updated Feb 12, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: RemoteConnect and SCADAPack x70 Utilities Category: ICS / OT

Description

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity
and potential remote code execution on workstation when a non-admin authenticated user opens a malicious
project file.

Affected products

VendorProductAffectedFixed
Schneider Electric RemoteConnect and SCADAPack x70 Utilities All versions —

Advisories 2

References