CVE-2018-7817

A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.

Score

CVSS 3.0 7.8 High

Status

Modified - cybersecurity@se.com

Published

2019-02-06

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Zelio Soft 2 (Schneider-electric)
• Zelio Soft 2 V5.1 And Prior Versions (Schneider Electric Se)

References

• http://www.securityfocus.com/bid/106481
• https://ics-cert.us-cert.gov/advisories/ICSA-19-008-01
• https://www.schneider-electric.com/en/download/document/SEVD-2018-361-01/