Schneider Electric Zelio Soft 2 vulnerabilities

3 CVEs affecting Schneider Electric Zelio Soft 2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8422, published 2024-10-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6822, published 2019-07-15. High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days. A Use After Free: CWE-416 vulnerability exists in Zelio Soft 2, V5.2 and earlier, which could cause remote code execution when opening a specially crafted Zelio Soft 2 project file.
CVE-2018-7817, published 2019-02-06. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.
CVE-2024-8422, published 2024-10-08. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. CWE-416: Use After Free vulnerability exists that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when application user opens a malicious Zelio Soft 2…