CVE-2024-8531 — Schneider Electric / Data Center Expert

CVE-2024-8531

Schneider Electric / Data Center Expert PUBLISHED

Description (CNA)

CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / Data Center Expert	affected Versions 8.1.1.3 and prior

CWE

CWE-347

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-01.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.