9.1
Critique
CVE-2021-22795 A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists…
Description
A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| StruxureWare Data Center Expert 7.8 | premières → < 7.8.1 | 7.8.1 |
Autres CVE de StruxureWare Data Center Expert
Les 15 CVE de StruxureWare Data Center Expert →
CVE-2023-37199
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Moyenne
CVE-2023-37198
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Moyenne
CVE-2023-37197
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
Élevée
CVE-2023-37196
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
Élevée