8.1
Élevée
CVE-2023-25552 A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or…
Description
A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| StruxureWare Data Center Expert 7.9 | premières → 7.9.2 | Pas de correctif indiqué |
Autres CVE de StruxureWare Data Center Expert
Les 15 CVE de StruxureWare Data Center Expert →
CVE-2023-37199
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Moyenne
CVE-2023-37198
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code…
6.8
Moyenne
CVE-2023-37197
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
Élevée
CVE-2023-37196
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection')…
8.8
Élevée