Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE uploads or tampers with install
packages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | v7.9.3 and earlier | — |
Advisories 1
- SEVD-2023-192-01 StruxureWare Data Center Expert Schneider Electric CPCERT · Jul 11, 2023