Skip to content
Sign in
8.1 High

CVE-2023-25552 A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or…

Description

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products and versions

Product Affected versions Fixed in
StruxureWare Data Center Expert 7.9 earliest → 7.9.2 No fix stated

Other CVEs of StruxureWare Data Center Expert

The 15 CVEs of StruxureWare Data Center Expert →
CVE-2023-37199 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37198 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High CVE-2023-37196 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High
Track this CVE