7.2
High
CVE-2023-25550 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code…
Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted hostname syntax is entered. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| StruxureWare Data Center Expert 7.9 | earliest → 7.9.2 | No fix stated |
Other CVEs of StruxureWare Data Center Expert
The 15 CVEs of StruxureWare Data Center Expert →
CVE-2023-37199
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Medium
CVE-2023-37198
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Medium
CVE-2023-37197
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
High
CVE-2023-37196
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
High