Schneider-Electric Struxureware Data Center Expert vulnerabilities

CVE-2023-37198 [MEDIUM] CWE-94 CVE-2023-37198: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that c A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with install packages.

CVE-2023-37196 [HIGH] CWE-89 CVE-2023-37196: A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL In A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the alert settings of endpoints on DCE.

CVE-2023-37197 [HIGH] CWE-89 CVE-2023-37197: A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the mass configuration settings of endpoints on DCE.

CVE-2023-37199 [MEDIUM] CWE-94 CVE-2023-37199: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored.

CVE-2023-25549 [HIGH] CWE-94 CVE-2023-25549: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings endpoint. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25550 [HIGH] CWE-94 CVE-2023-25550: A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists th A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted hostname syntax is entered. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25552 [HIGH] CWE-862 CVE-2023-25552: A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized co A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25554 [HIGH] CWE-78 CVE-2023-25554: A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Inject A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25547 [HIGH] CWE-863 CVE-2023-25547: A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on u A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25555 [MEDIUM] CWE-78 CVE-2023-25555: A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Comm A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25551 [MEDIUM] CWE-79 CVE-2023-25551: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Script A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE file upload endpoint when tampering with parameters over HTTP. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25553 [MEDIUM] CWE-79 CVE-2023-25553: A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scri A CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2023-25548 [HIGH] CWE-863 CVE-2023-25548: A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentia A CWE-863: Incorrect Authorization vulnerability exists that could allow access to device credentials on specific DCE endpoints not being properly secured when a hacker is using a low privileged user. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CVE-2021-22795 [CRITICAL] CWE-78 CVE-2021-22795: A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

CVE-2021-22794 [CRITICAL] CWE-22 CVE-2021-22794: A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

CVE-2018-7807 [HIGH] CWE-22 CVE-2018-7807: Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user in Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server. A carefully crafted, malicious file could be mistakenly uploaded by an authenticated user via this feature which could contain path traversal file names. As such, it could allow for the arbitrary upload of files contained with the zi

CVE-2018-3693 [MEDIUM] CVE-2018-3693: Systems with microprocessors utilizing speculative execution and branch prediction may allow unautho Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.

CVE-2018-1126 [MEDIUM] CVE-2018-1126: procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading t procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues. This flaw is related to CVE-2018-1124.

CVE-2018-1124 [HIGH] CWE-122 CVE-2018-1124: procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corrup procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function. This allows a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users.

CVE-2018-3639 [MEDIUM] CWE-203 CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory rea Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.