Vulnerability Details CVE-2023-3953
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory
Buffer vulnerability exists that could cause memory corruption when an authenticated user
opens a tampered log file from GP-Pro EX.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.1%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2023-3953
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.00.000
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.07.300
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.08
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.08.200
-
cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:4.09.450