VDB
BDU%3A2023-02705
BDU%3A2023-02705
PUBLISHED
CVSS 7.599999904632568 HIGH
Уязвимость функции Decompression EnumerationUncompressor::UncompressItem инструмент сжатия XML-данных Xmill, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.599999904632568
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric, AT&T Labs | EcoStruxur Process Expert, EcoStruxure Control Expert, SCADAPack RemoteConnect, Xmill |
Timeline
- May 22, 2023 CVE Published
- Sep 13, 2024 CVE Updated
References
- https://www.cybersecurity-help.cz/vdb/SB2021081203 url
- https://safe-surf.ru/upload/VULN/VULN-20210813.2.pdf url
- https://www.se.com/hk/en/download/document/SEVD-2021-222-02/ url
- https://talosintelligence.com/vulnerability_reports/TALOS-2021-1292 url
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-223-03 url