Advisories · Technology

Schneider Electric Custom Reports (RMS16.dll).

Every CVE that names Schneider Electric Custom Reports (RMS16.dll) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-27984 CVE record

CVSS 7.8 High

Improper input validation in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- CWE-20
Not analysed yet 21 Mar 2023
CVE-2023-27983 CVE record

CVSS 6.5 Medium

Missing authentication in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- Authentication bypass
Not analysed yet 21 Mar 2023
CVE-2023-27982 CVE record

CVSS 8.8 High

Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- CWE-345
Not analysed yet 21 Mar 2023
CVE-2023-27981 CVE record

CVSS 7.8 High

Path traversal in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- Path traversal
Not analysed yet 21 Mar 2023
CVE-2023-27980 CVE record

CVSS 8.8 High

Missing authentication in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- Authentication bypass
Not analysed yet 21 Mar 2023
CVE-2023-27979 CVE record

CVSS 6.5 Medium

Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- CWE-345
Not analysed yet 21 Mar 2023
CVE-2023-27978 CVE record

CVSS 7.8 High

Deserialization of untrusted data in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- Insecure deserialization
Not analysed yet 21 Mar 2023
CVE-2023-27977 CVE record

CVSS 6.5 Medium

Insufficient verification of data authenticity in Schneider Electric IGSS Data Server(IGSSdataServer.exe) and others
- Schneider Electric IGSS Data Server(IGSSdataServer.exe)
- Schneider Electric IGSS Dashboard (DashBoard.exe)
- CWE-345
Not analysed yet 21 Mar 2023