CVE-2023-25552 — Schneider Electric / StruxureWare Data Center Expert

Description (CNA)

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected (CNA)

Vendor / product	Versions
Schneider Electric / StruxureWare Data Center Expert	affected All through V7.9.2

CWE

CWE-862

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf

CISA-ADP

No English description supplied.

No references supplied.