| CVE | CVE-2023-4516 |
| CVE Title | |
| Published Date | 2023-09-14T09:15Z |
| Modified Date | 2023-09-20T14:03Z |
| CWE Type | CWE-306 |
| CVSS 3.x | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| Description | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content. |
| References | |
| By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
| Reference URL | https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-255-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-255-01.pdf |
| Reference Description | MISC https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-255-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-255-01.pdf |
| Reference Description | |
| Tags | Patch Vendor Advisory |
| Sources | NIST MITRE |
