Missing Authorization Vulnerability in StruxureWare Data Center Expert by Schneider Electric

CVE-2023-25552

Summary

A missing authorization vulnerability has been identified in StruxureWare Data Center Expert, which could enable unauthorized users to view sensitive content, modify, or delete critical data. This issue arises from the manipulation of Device File Transfer settings on DCE endpoints, allowing potential adversaries to perform unauthorized actions. Users are advised to review their configurations and implement necessary security measures to mitigate exposure.

References