CVE-2023-1548

published 2023-04-18

CVE-2023-1548: A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service…

Priority P4 20 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I N A H

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to
perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Affected

6 ranges

Vendor	Product	Version range	Fixed in
linux	linux_kernel	>= 5.15.0 < 5.15.111	5.15.111
linux	linux_kernel	>= 5.16.0 < 6.1.28	6.1.28
linux	linux_kernel	>= 6.2.0 < 6.2.15	6.2.15
linux	linux_kernel	>= 6.3.0 < 6.3.2	6.3.2
schneider-electric	ecostruxure_control_expert	>= 15.1	—
schneider_electric	ecostruxure_control_expert	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269