2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"GP-Pro EX WinGP for iPC","vendor":"Schneider Electric","versions":[{"status":"affected","version":"v4.09.450 and prior"}]},{"defaultStatus":"unaffected","product":"GP-Pro EX WinGP for PC/AT","vendor":"Schneider Electric","versions":[{"status":"affected","version":"v4.09.450 and prior"}]}],"source":"cybersecurity@se.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:schneider-electric:pro-face_gp-pro_ex:*:*:*:*:*:*:*:*","matchCriteriaId":"CED20D73-6B2A-42AE-AFC8-C28284E88E5E","versionEndExcluding":"4.09.500","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nA CWE-119: Improper Restriction of Operations within the Bounds of a Memory\nBuffer vulnerability exists that could cause memory corruption when an authenticated user\nopens a tampered log file from GP-Pro EX."},{"lang":"es","value":"Existe una vulnerabilidad CWE-119: Restricción inadecuada de operaciones dentro de los límites de un búfer de memoria que podría provocar daños en la memoria cuando un usuario autenticado abre un archivo de registro manipulado desde GP-Pro EX."}],"id":"CVE-2023-3953","lastModified":"2026-06-17T06:15:27.007","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.4,"source":"cybersecurity@se.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.4,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-3953","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-09T17:55:24.434489Z","version":"2.0.3"}}]},"published":"2023-08-09T15:15:09.623","references":[{"source":"cybersecurity@se.com","tags":["Vendor Advisory"],"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf"}],"sourceIdentifier":"cybersecurity@se.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"cybersecurity@se.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|