CVE-2024-8422 — Use After Free in Zelio Soft 2

CWE-416 — Use After Free3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 65.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Schneider-electric Zelio Soft 2Schneider Electric Zelio Soft 2
Timeline
PublishedOct 8

Description

CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5schneider_electric/zelio_soft_2Versions prior to 5.4.2.2

🔴Vulnerability Details

2
CVEList
CVE-2024-8422: CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when↗2024-10-08
▶
GHSA
GHSA-4j7f-w856-r2v2: CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when↗2024-10-08
▶
CVE-2024-8422 — Use After Free in Zelio Soft 2 | cvebase