Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
allows remote code execution via the “hostname” parameter when maliciously crafted hostname
syntax is entered.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | All – ≤ V7.9.2 | — |
Advisories 1
- SEVD-2023-045-02 StruxureWare Data Center Expert Schneider Electric CPCERT · Feb 14, 2023