Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2023-37199

CVE-2023-37199

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Schneider Electric StruxureWare Data Center Expert

Default version status: unaffected

  • v7.9.3 and earlieraffected

References