Severity
High
Analysis Summary
CVE-2023-7032
Schneider Electric Easergy Studio could allow a local authenticated attacker to execute arbitrary code on the system, caused by the unsafe deserialization of data. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2023-7032
Affected Vendors
Schneider Electric
Affected Products
- Schneider Electric Easergy Studio 9.3.5
Remediation
Upgrade to the latest version of Easergy Studio, available from the Schneider Electric Website.