An Improper Input Validation vulnerability exists in Pro-Face GP-Pro EX v4.08 and previous versions which could cause the execution arbitrary executable when GP-Pro EX is launched.
https://www.schneider-electric.com/en/download/document/SEVD-2018-354-02/