CVE-2015-7375

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-09-25 · updated 2026-06-17
Weakness: CWE-20

Description

Schneider Electric InduSoft Web Studio before 8.0 allows remote attackers to execute arbitrary code or cause a denial of service (unhandled runtime exception and application crash) via a crafted Indusoft Project file.

Affected products

InduSoft Web Studio: through 7.1.3.6

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-251-01

Get alerted when CVE-2015-7375 or the next vulnerability affects your stack