CVE-2023-27981
CVSS V2 None
CVSS V3 None
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Overview
- CVE ID
- CVE-2023-27981
- Assigner
- cybersecurity@se.com
- Vulnerability Status
- Analyzed
- Published Version
- 2023-03-21T10:15:17
- Last Modified Date
- 2023-03-24T17:15:29
Weakness Enumerations
CPE Configuration (Product)
CPE | Vulnerable | Operator | Version Start | Version End |
---|---|---|---|---|
cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:* | 1 | OR | 16.0.0.23040 | |
cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:* | 1 | OR | 16.0.0.23040 | |
cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:* | 1 | OR | 16.0.0.23040 |
References
Reference URL | Reference Tags |
---|---|
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-04.pdf | Patch Vendor Advisory |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-27981 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27981 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2023-04-17 03:02:05 | Added to TrackCVE | |||
2023-04-17 03:02:08 | Weakness Enumeration | new |