CVE-2015-7375

Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2015-09-25

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Web Studio (Indusoft)

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01