March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – GandCrab or .CRAB Ransomware – Active IOCs
January 15, 2024
Rewterz Threat Advisory – Ivanti VPN Zero-Days Weaponized by UNC5221 Threat Actors to Deploy Multiple Malware Families – Active IOCs
January 15, 2024
Rewterz Threat Alert – GandCrab or .CRAB Ransomware – Active IOCs
January 15, 2024
Rewterz Threat Advisory – Ivanti VPN Zero-Days Weaponized by UNC5221 Threat Actors to Deploy Multiple Malware Families – Active IOCs
January 15, 2024
Severity
High
Analysis Summary
CVE-2023-7032
Schneider Electric Easergy Studio could allow a local authenticated attacker to execute arbitrary code on the system, caused by the unsafe deserialization of data. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2023-7032
Affected Vendors
Schneider Electric
Affected Products
- Schneider Electric Easergy Studio 9.3.5
Remediation
Upgrade to the latest version of Easergy Studio, available from the Schneider Electric Website.