Skip to content
OpenAdvisories
High · 8.8 CVE-2023-25548 EUVD-2023-29500GHSA-p36f-2c38-5gp4

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being p…

Published Apr 18, 2023 · Updated Mar 3, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: StruxureWare Data Center Expert Category: ICS / OT

Description

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device
credentials on specific DCE endpoints not being properly secured when a hacker is using a low
privileged user.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric StruxureWare Data Center Expert All – ≤ V7.9.2 —

Advisories 1

References