CVE-2023-3001: High severity Schneider-electric Igss Dashboard vulnerability
Published Jun 14, 2023
·Updated
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.
Affected Software
1 affected component
Schneider-electric Igss Dashboard<16.0.0.23131
Event History
Jun 14, 2023
CVE Published
via MITRE·07:40 AM
Data Sourced
via MITRE·07:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-3001?
CVE-2023-3001 is a Deserialization of Untrusted Data vulnerability in the Dashboard module that could lead to remote code execution.
2
What is the severity of CVE-2023-3001?
CVE-2023-3001 has a severity rating of 7.8 (high).
3
How does CVE-2023-3001 affect Schneider-electric Igss Dashboard?
CVE-2023-3001 affects Schneider-electric Igss Dashboard version 16.0.0.23131 and earlier.
4
How can CVE-2023-3001 be exploited?
CVE-2023-3001 can be exploited by an attacker tricking the user into opening a malicious file.
5
How do I fix CVE-2023-3001?
To fix CVE-2023-3001, update Schneider-electric Igss Dashboard to a version beyond 16.0.0.23131.