Description
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to
access unauthorized content, change, or delete content, or perform unauthorized actions when
tampering with the alert settings of endpoints on DCE.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | v7.9.3 and earlier | — |
Advisories 1
- SEVD-2023-192-01 StruxureWare Data Center Expert Schneider Electric CPCERT · Jul 11, 2023