SoSafe Configurable

An attacker could execute arbitrary code on an engineering workstation if a user opens a malicious SoSafe Configurable project file, potentially compromising the safety controller configuration and the ability to safely manage Preventa safety systems.

Energy sector organizations using SoSafe Configurable for engineering and maintenance of Preventa safety controllers should prioritize this patch. Anyone responsible for configuring or managing safety controller projects is at risk if they open untrusted or compromised project files.

An attacker creates a malicious SoSafe Configurable project file and tricks a user into opening it on an engineering workstation. When opened, the file triggers unsafe deserialization (CWE-502) that executes arbitrary code with the privileges of the user running the application.