CVE-2023-37199

A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored...

CVE-2023-37199

CVE-2023-37199 concerns Schneider Electric StruxureWare Data Center Expert (DCE). Multiple connected sources identify a CWE-94 Code Injection vulnerability that could allow remote code execution when an administrator tampers with backups that are then restored. The vulnerability affects StruxureW...