CVE-2023-37199: medium-severity vulnerability in Schneider Electric StruxureWare Data Center…
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 0.9%
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE tampers with backups which
are then manually restored.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
Schneider Electric · StruxureWare Data Center ExpertRelated CVEs — Schneider Electric StruxureWare Data Center…
In the same product, most dangerous first.