CVE-2023-1552

CVE-2023-1552 is a deserialization vulnerability affecting GE ToolboxST prior to version 7.10. An attacker with local access to an HMI or through social engineering could execute arbitrary code within a Toolbox user's context by manipulating an untrusted configuration file. This vulnerability carries a high severity CVSS score of 7.8, indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to full compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.