Description
CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial
of service and loss of confidentiality & integrity when application user opens a malicious Zelio
Soft 2 project file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Zelio Soft 2 | Versions prior to 5.4.2.2 | — |
Advisories 2
- ICSA-24-284-14 Schneider Electric Zelio Soft 2 CISA ICS & IT advisories · Oct 10, 2024
- SEVD-2024-282-06 Zelio Soft 2 Schneider Electric CPCERT · Oct 8, 2024