Description (CNA)
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / EcoStruxure™ Automation Expert | affected Versions prior to v25.0.1 |
CWE
CWE-94
References
ADP enrichment
No English description supplied.
No references supplied.