VDB

CVE-2023-37199

CVE-2023-37199 PUBLISHED CVSS 6.800000190734863 MEDIUM

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

EPSS 0.86% · 57.1th percentile

Risk Scores

CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.86%
57.1th percentile

Affected Products

VendorProductVersions
schneider-electricstruxureware_data_center_expert0
Schneider ElectricStruxureWare Data Center Expert v7.9.3 and earlier
schneider-electricstruxureware_data_center_expert0

Timeline

  • Jul 11, 2023 CVE Published
  • Jul 12, 2023 EPSS Score
  • Aug 16, 2023 EPSS Score
  • Oct 26, 2023 EPSS Score
  • Nov 30, 2023 EPSS Score
  • Jan 4, 2024 EPSS Score
  • Feb 8, 2024 EPSS Score
  • Apr 19, 2024 EPSS Score
  • May 24, 2024 EPSS Score
  • Jun 28, 2024 EPSS Score
  • Aug 2, 2024 EPSS Score
  • Oct 12, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›