Description (CNA)
A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allow arbitrary code execution when an attacker builds a custom .SDB file containing a malicious serialized buffer.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / SCADAPack x70 Security Administrator V1.2.0 and prior. | affected SCADAPack x70 Security Administrator V1.2.0 and prior. |
CWE
CWE-502
References
ADP enrichment
No English description supplied.