{"id":"CVE-2023-3001","aliases":["EUVD-2023-43694","GHSA-r5pf-h3vv-f4pr"],"status":"published","title":"A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...","description":"A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that\ncould cause an interpretation of malicious payload data, potentially leading to remote code\nexecution when an attacker gets the user to open a malicious file.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.31861,"percentile":0.98315,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-502"],"published":"2023-06-14T07:40:16Z","modified":"2026-06-17T06:13:08Z","products":[{"vendor":"schneider electric","product":"igss dashboard (dashboard.exe)"},{"vendor":"schneider-electric","product":"igss_dashboard"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-164-02\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2023-164-02.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3001"},{"url":"https://github.com/advisories/GHSA-r5pf-h3vv-f4pr"}],"sources":{"cve":[{"id":"CVE-2023-3001","description":"\nA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that\ncould cause an interpretation of malicious payload data, potentially leading to remote code\nexecution when an attacker gets the user to open a malicious file. \n\n","status":"published","published":"2023-06-14T07:40:16.412Z","modified":"2025-03-05T18:57:40.227Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:35:24.707957Z"}],"euvd":[{"id":"EUVD-2023-43694","description":"\nA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that\ncould cause an interpretation of malicious payload data, potentially leading to remote code\nexecution when an attacker gets the user to open a malicious file. \n\n","status":"published","published":"2023-06-14T07:40:16Z","modified":"2025-03-05T18:57:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:53:13.319718Z"}],"ghsa":[{"id":"GHSA-r5pf-h3vv-f4pr","title":"\nA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that...","description":"\nA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that\ncould cause an interpretation of malicious payload data, potentially leading to remote code\nexecution when an attacker gets the user to open a malicious file. \n\n","status":"published","published":"2023-06-14T09:30:42Z","modified":"2024-04-04T04:49:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:56:27.331112Z"}],"nvd":[{"id":"CVE-2023-3001","description":"\nA CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that\ncould cause an interpretation of malicious payload data, potentially leading to remote code\nexecution when an attacker gets the user to open a malicious file. \n\n","status":"published","published":"2023-06-14T08:15:09.577Z","modified":"2026-06-17T06:13:08.833Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:08:06.335469Z"}]}}