CVE-2023-25548

Summary

A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a low privileged user.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected Software

VendorProductVersion RangeStatus
Schneider ElectricStruxureWare Data Center ExpertAll <= V7.9.2affected

Weaknesses

  • CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References