Skip to content
Sign in
7.2 High

CVE-2023-25549 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code…

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings endpoint. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products and versions

Product Affected versions Fixed in
StruxureWare Data Center Expert 7.9 earliest → 7.9.2 No fix stated

Other CVEs of StruxureWare Data Center Expert

The 15 CVEs of StruxureWare Data Center Expert →
CVE-2023-37199 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37198 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High CVE-2023-37196 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High
Track this CVE