Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE tampers with backups which
are then manually restored.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | v7.9.3 and earlier | — |
Advisories 1
- SEVD-2023-192-01 StruxureWare Data Center Expert Schneider Electric CPCERT · Jul 11, 2023