Skip to content
OpenAdvisories
Medium · 5.5 CVE-2023-1548 EUVD-2023-23782GHSA-w35h-r9ff-45q4

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the cons…

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure Control Expert Category: ICS / OT

Description

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to
perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure Control Expert V15.1 and above —

Advisories 1

References