Custom Reports
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Custom Reports (fc1bcebf-49d5-5d49-a8ad-557d383ed9d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-27984 |
vulnerable | 2026-06-08 05:57:42.664066 |
Details available
HIGH (7.8)
A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:14.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27983 |
vulnerable | 2026-06-08 05:57:42.663528 |
Details available
MEDIUM (6.5)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report directory, this would lead to loss of data when an attacker abuses this functionality. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:21.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27982 |
vulnerable | 2026-06-08 05:57:42.663001 |
Details available
HIGH (8.8)
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code execution when a victim eventually opens a malicious dashboard file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:29.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27981 |
vulnerable | 2026-06-08 05:57:42.662400 |
Details available
HIGH (7.8)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:37.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27980 |
vulnerable | 2026-06-08 05:57:42.661889 |
Details available
HIGH (8.8)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS project report directory, this could lead to remote code execution when a victim eventually opens the report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior)
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:44.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27979 |
vulnerable | 2026-06-08 05:57:42.661237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27978 |
vulnerable | 2026-06-08 05:57:42.660613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27977 |
vulnerable | 2026-06-08 05:57:42.658792 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.