CVE-2023-3953 — Schneider Electric / GP-Pro EX WinGP for iPC

Description (CNA)

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / GP-Pro EX WinGP for iPC	affected v4.09.450 and prior
Schneider Electric / GP-Pro EX WinGP for PC/AT	affected v4.09.450 and prior

CWE

CWE-119

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-220-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-220-01.pdf

CISA-ADP

No English description supplied.

No references supplied.