Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-25550
HistoryApr 18, 2023 - 9:15 p.m.

Code injection

2023-04-1821:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
cwe-94
remote code execution
struxureware data center expert
vulnerability
nvd
affected products

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

A CWE-94: Improper Control of Generation of Code (‘Code Injection’) vulnerability exists that
allows remote code execution via the “hostname” parameter when maliciously crafted hostname
syntax is entered.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

CPENameOperatorVersion
struxureware_data_center_expertle7.9.2

9.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

Related for PRION:CVE-2023-25550