Skip to content
OpenAdvisories
High · 8.8 CVE-2023-25547 EUVD-2023-29499GHSA-hg89-qxh6-xfx9

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker…

Published Apr 18, 2023 · Updated Feb 12, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: StruxureWare Data Center Expert Category: ICS / OT

Description

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution
on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric StruxureWare Data Center Expert All – ≤ V7.9.2 —

Advisories 1

References