CVE-2022-32521

published 2023-01-30

CVE-2022-32521: A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	data_center_expert	< 7.9.0	7.9.0
schneider_electric	data_center_expert	>= All < V7.9.0	V7.9.0

CWE-502