Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-25552

CVE-2023-25552

Description

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric StruxureWare Data Center Expert

Default version status: unaffected

  • All to ≤ V7.9.2affected

References