Medium severity6.8NVD Advisory· Published Jul 12, 2023· Updated Jun 17, 2026
CVE-2023-37198
CVE-2023-37198
Description
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.
Affected products
3cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schneider-electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*range: <=7.9.3
- (no CPE)range: v7.9.3 and earlier
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.