Schneider-Electric Zelio Soft 2 vulnerabilities

3 known vulnerabilities affecting schneider-electric/zelio_soft_2.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3

Vulnerabilities

Page 1 of 1

CVE-2024-8422HIGHCVSS 7.8fixed in 5.4.2.22024-10-08

CVE-2024-8422 [HIGH] CWE-416 CVE-2024-8422: CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of se CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.

CVE-2019-6822HIGHCVSS 7.8≤ 5.22019-07-15

CVE-2019-6822 [HIGH] CWE-416 CVE-2019-6822: A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file.

CVE-2018-7817HIGHCVSS 7.8≤ 5.12019-02-06

CVE-2018-7817 [HIGH] CWE-416 CVE-2018-7817: A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.