Schneider Electric Zelio Soft 2 vulnerabilities

2 known vulnerabilities affecting schneider_electric/zelio_soft_2.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1LOW1

Vulnerabilities

Page 1 of 1

CVE-2024-8422HIGHCVSS 7.8vVersions prior to 5.4.2.22024-10-08

CVE-2024-8422 [HIGH] CWE-416 CVE-2024-8422: CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of se CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2 project file.

CVE-2024-8518LOWCVSS 3.3vVersions prior to 5.4.2.22024-10-08

CVE-2024-8518 [LOW] CWE-20 CVE-2024-8518: CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user.