Vulnerability Details CVE-2023-25548
A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device
credentials on specific DCE endpoints not being properly secured when a hacker is using a low
privileged user.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.5%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2023-25548
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.3.1
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.0
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.1
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.2
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.4.3
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.5.0
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.6.0
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.7.1
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.8.1
-
cpe:2.3:a:schneider-electric:struxureware_data_center_expert:7.9.2