Vulnerability · Published Aug 9, 2023 · Assigned by schneider
CVE-2023-3953
Medium 5.3
In plain English
A medium-severity memory corruption in GP-Pro EX WinGP for iPC from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 92.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause memory corruption when an authenticated user opens a tampered log file from GP-Pro EX.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | GP-Pro EX WinGP for iPC | v4.09.450 and prior |
| Schneider Electric | GP-Pro EX WinGP for PC/AT | v4.09.450 and prior |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L