Vulnerability Details CVE-2018-7832
An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.7%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
- http://www.securityfocus.com/bid/106441
- https://ics-cert.us-cert.gov/advisories/ICSA-19-003-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-354-02/
- http://www.securityfocus.com/bid/106441
- https://ics-cert.us-cert.gov/advisories/ICSA-19-003-01
- https://www.schneider-electric.com/en/download/document/SEVD-2018-354-02/
Products affected by CVE-2018-7832
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.00.000
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.07.300
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.08