← CVE Intelligence

CVE-2023-1049

Schneider Electric / EcoStruxure™ Operator Terminal Expert PUBLISHED

Description (CNA)

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

Affected (CNA)

Vendor / productVersions
Schneider Electric / EcoStruxure™ Operator Terminal Expertaffected 3.3 SP1 and prior
Schneider Electric / Pro-face BLUEaffected 3.3 SP1 and prior

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.