Description
A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker to execute arbitrary code on the targeted system by sending a specifically crafted packet to the application.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Schneider Electric EcoStruxure Power Monitoring Expert
Default version status: unaffected
All versions – prior to application of Hotfix-145271affected
Schneider Electric EcoStruxure Power Operation (EPO) with Advanced Reports
Default version status: unaffected
All versions – prior to application of Hotfix-145271affected
Schneider Electric EcoStruxure Power SCADA Operation with Advanced Reports
Default version status: unaffected
All versions – prior to application of Hotfix-145271affected