Description
CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft
2 application when a specially crafted project file is loaded by an application user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Zelio Soft 2 | Versions prior to 5.4.2.2 | — |
Advisories 2
- ICSA-24-284-14 Schneider Electric Zelio Soft 2 CISA ICS & IT advisories · Oct 10, 2024
- SEVD-2024-282-06 Zelio Soft 2 Schneider Electric CPCERT · Oct 8, 2024