high7.8
CVE-2021-22777
A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.
Impact
A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Sosafe Configurable | before 1.8.1 |