CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-7032

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.6%

CVSS Severity

CVSS v3 Score 7.8

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-009-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-009-02.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-009-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-009-02.pdf

Products affected by CVE-2023-7032

Schneider-Electric » Easergy Studio » Version: N/A

cpe:2.3:a:schneider-electric:easergy_studio:-
Schneider-Electric » Easergy Studio » Version: 9.3.3

cpe:2.3:a:schneider-electric:easergy_studio:9.3.3
Schneider-Electric » Easergy Studio » Version: 9.3.5

cpe:2.3:a:schneider-electric:easergy_studio:9.3.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-7032

Products

Pricing

Contact Us