High severity7.8NVD Advisory· Published Mar 21, 2023· Updated Jun 17, 2026
CVE-2023-27981
CVE-2023-27981
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Affected products
7cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schneider-electric:custom_reports:*:*:*:*:*:*:*:*range: <=16.0.0.23040
- (no CPE)range: <=V16.0.0.23040
- cpe:2.3:a:schneider-electric:igss_dashboard:*:*:*:*:*:*:*:*Range: <=16.0.0.23040
cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schneider-electric:igss_data_server:*:*:*:*:*:*:*:*range: <=16.0.0.23040
- (no CPE)range: <=V16.0.0.23040
<=V16.0.0.23040+ 1 more
- (no CPE)range: <=V16.0.0.23040
- (no CPE)range: V
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.