The IM-LogicDesigner module in intra‑mart Accel Platform implements insecure deserialization. When a user with administrative privileges imports a crafted file into the module, an attacker can execute arbitrary code on the underlying system. The vulnerability directly compromises confidentiality, integrity, and availability by allowing full control over the compromised host.

NTT DATA INTRAMART Corporation’s intra‑mart Accel Platform versions 8.0.4 through 8.0.27 are affected. The issue exists in every iteration of the Accel Platform within that range where the IM‑LogicDesigner component is present.

The CVSS score of 8.6 classifies this vulnerability as high. Although the EPSS score is reported as less than 1%, indicating a low exploitation probability, the lack of a KEV listing suggests no widespread public exploits have been observed. The attack vector is inferred to be local, requiring an attacker to have administrative access to the system in order to import a malicious file. Once the crafted file is loaded by an admin user, arbitrary code execution is possible, making the risk significant for environments where administrative privileges are not tightly controlled.