Skip to content
OpenAdvisories
High · 7.8 CVE-2024-2229 EUVD-2024-27185GHSA-8342-5mrm-xwwg

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious project file is loa…

Published Mar 18, 2024 · Updated Aug 1, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Power Design - Ecodial Category: ICS / OT

Description

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code
execution when a malicious project file is loaded into the application by a valid user.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Power Design - Ecodial All Versions NL, All Versions INT, All Versions FR —

Advisories 2

References