CVE-2024-8422

published 2024-10-08

CVE-2024-8422: CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial
of service and loss of confidentiality & integrity when application user opens a malicious Zelio
Soft 2 project file.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	zelio_soft_2	< 5.4.2.2	5.4.2.2
schneider_electric	zelio_soft_2	—	—

CWE-416