Description
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could
compromise the Data Center Expert software when an upgrade bundle is manipulated to
include arbitrary bash scripts that are executed as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Data Center Expert | Versions 8.1.1.3 and prior | — |
Advisories 3
- ICSA-25-016-08 Schneider Electric Data Center Expert CISA ICS & IT advisories · Oct 8, 2024
- ICSA-24-289-02 Schneider Electric Data Center Expert CISA ICS & IT advisories · Oct 8, 2024
- SEVD-2024-282-01 Data Center Expert Schneider Electric CPCERT · Oct 8, 2024