Schneider Electric Easergy Studio
A deserialization of untrusted data vulnerability exists in  Schneider Electric Easergy Studio versions prior to v9.3.5 that could allow an attacker logged in with a user level account to gain higher privileges by providing a harmful serialized object.