Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
allows for remote code execution when using a parameter of the DCE network settings
endpoint.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | All – ≤ V7.9.2 | — |
Advisories 1
- SEVD-2023-045-02 StruxureWare Data Center Expert Schneider Electric CPCERT · Feb 14, 2023