Skip to content
Sign in
8.8 High

CVE-2023-25547 A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install…

Description

A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products and versions

Product Affected versions Fixed in
StruxureWare Data Center Expert 7.9 earliest → 7.9.2 No fix stated

Other CVEs of StruxureWare Data Center Expert

The 15 CVEs of StruxureWare Data Center Expert →
CVE-2023-37199 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37198 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code… 6.8 Medium CVE-2023-37197 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High CVE-2023-37196 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')… 8.8 High
Track this CVE