CVE-2023-37199 — Schneider Electric / StruxureWare Data Center Expert

CVE-2023-37199

Schneider Electric / StruxureWare Data Center Expert PUBLISHED

Description (CNA)

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / StruxureWare Data Center Expert	affected v7.9.3 and earlier

CWE

CWE-94

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-01.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-192-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-192-01.pdf

CISA-ADP

No English description supplied.

No references supplied.