Schneider Electric IGSS Dashboard (DashBoard.exe)
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-3001 | v16.0.0.23130 and prior | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious pa | HIGH 7.8 | 32 % | ||
| CVE-2023-27984 | V – 16.0.0.23040 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to r | HIGH 8.8 | 0.6 % | ||
| CVE-2023-27983 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of r | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-27982 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard | HIGH 8.8 | 0.4 % | ||
| CVE-2023-27981 | V – 16.0.0.23040 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code | HIGH 8.8 | 0.7 % | ||
| CVE-2023-27980 | V – 16.0.0.23040 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation | HIGH 8.8 | 0.9 % | ||
| CVE-2023-27979 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in | MEDIUM 6.5 | 0.2 % | ||
| CVE-2023-27978 | V – 16.0.0.23040 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious pa | HIGH 7.8 | 6.5 % | ||
| CVE-2023-27977 | V – 16.0.0.23040 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in | MEDIUM 6.5 | 0.2 % |