Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to remote code execution when an attacker gets the user to open a malicious file.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
Schneider Electric IGSS 代码问题漏洞
Vulnerability Description
Schneider Electric IGSS是法国施耐德电气（Schneider Electric）公司的应用软件一个多人合作应用程序 Schneider Electric IGSS Dashboard (DashBoard.exe) v16.0.0.23130 及之前版本存在代码问题漏洞，该漏洞源于仪表板模块中存在不可信数据反序列化，可能导致对恶意负载数据的解释，攻击者利用该漏洞可以执行远程代码。
CVSS Information
N/A
Vulnerability Type
N/A