Vulnetix
Try Vulnetix Request Demo
CVE-2023-37199 PUBLISHED CVSS 6.800000190734863 MEDIUM

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

EPSS 1.69% · 82.1th percentile

Risk Scores

CVSS v3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
1.69%
82.1th percentile

Affected Products

VendorProductVersions
schneider-electricstruxureware_data_center_expert0
Schneider ElectricStruxureWare Data Center Expert v7.9.3 and earlier
schneider-electricstruxureware_data_center_expert0

Timeline

References

Open in Interactive Console →