CVE-2024-8531highCWE-347

CVE-2024-8531: high-severity vulnerability in Schneider Electric Data Center Expert

Published · Updated

Follow this CVE+ Monitor Data Center Expert

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.2epss 0.5%
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Schneider Electric · Data Center Expert
Related CVEs — Schneider Electric Data Center Expert

In the same product, most dangerous first.

CVE-2024-8530MEDIUMCVE-2024-8530EPSS 0.5%CVE-2022-32521HIGHCVE-2022-32521EPSS 0.5%CVE-2022-32520HIGHCVE-2022-32520EPSS 0.5%CVE-2022-32518HIGHCVE-2022-32518EPSS 0.5%CVE-2022-32519HIGHCVE-2022-32519EPSS 0.5%