Vulnerabilities > CVE-2021-22777 - Deserialization of Untrusted Data vulnerability in Schneider-Electric Sosafe Configurable
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |