Igss Dashboard
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c) |
|---|---|
| Product | Igss Dashboard (3bdf1975-f0fa-5b81-9d54-f56599a2952f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3001 |
vulnerable | 2026-06-08 06:09:38.276499 |
Details available
HIGH (7.8)
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that
could cause an interpretation of malicious payload data, potentially leading to remote code
execution when an attacker gets the user to open a malicious file.
Published: 2023-06-14T07:40:16.412Z
Updated: 2025-03-05T18:57:40.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27984 |
vulnerable | 2026-06-08 05:57:42.664178 |
Details available
HIGH (7.8)
A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens a malicious report file planted by an attacker. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:14.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27983 |
vulnerable | 2026-06-08 05:57:42.663547 |
Details available
MEDIUM (6.5)
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report directory, this would lead to loss of data when an attacker abuses this functionality. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:21.731Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27982 |
vulnerable | 2026-06-08 05:57:42.663103 |
Details available
HIGH (8.8)
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report directory, when an attacker sends specific crafted messages to the Data Server TCP port, this could lead to remote code execution when a victim eventually opens a malicious dashboard file. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:29.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27981 |
vulnerable | 2026-06-08 05:57:42.662497 |
Details available
HIGH (7.8)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Published: 2023-03-21T00:00:00.000Z
Updated: 2025-02-05T20:05:37.369Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27980 |
vulnerable | 2026-06-08 05:57:42.661988 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27979 |
vulnerable | 2026-06-08 05:57:42.661256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27978 |
vulnerable | 2026-06-08 05:57:42.660635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27977 |
vulnerable | 2026-06-08 05:57:42.659434 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.