CVE-2023-3001 HIGH

CVE-2023-3001

Vendor Schneider Electric
Product IGSS Dashboard (DashBoard.exe)
Weakness CWE-502 · Unsafe deserialization
Published June 14, 2023
Last update March 5, 2025

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.

Key dates

02Disclosure timeline

June 14, 2023 CVE published
March 5, 2025 Record updated