Deserialization Vulnerability in Data Center Expert by Schneider Electric

CVE-2022-32521

Summary

A vulnerability exists within Schneider Electric's Data Center Expert that involves the deserialization of untrusted data. This flaw could be exploited by an attacker to execute arbitrary code on the server when unsafe data is posted to the web application. This risk is particularly pronounced in versions prior to V7.9.0, emphasizing the importance of updates and maintaining security best practices to mitigate exploitation risks.

References