Struxureware Data Center Expert
Approved changes feed: RSS · Atom
cpe:2.3:a:schneider_electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Schneider Electric (90ae6a25-22b7-5d12-ba01-612e2f9226a5) |
|---|---|
| Product | Struxureware Data Center Expert (5974223a-910d-5c7f-ba37-dd702631446b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-37199 |
vulnerable | 2026-06-08 06:08:14.875800 |
Details available
MEDIUM (6.8)
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE tampers with backups which
are then manually restored.
Published: 2023-07-12T07:04:08.510Z
Updated: 2024-11-07T14:44:46.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37198 |
vulnerable | 2026-06-08 06:08:14.875453 |
Details available
MEDIUM (6.8)
A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE uploads or tampers with install
packages.
Published: 2023-07-12T06:44:34.037Z
Updated: 2024-11-07T14:45:30.711Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37197 |
vulnerable | 2026-06-08 06:08:14.875069 |
Details available
HIGH (8.8)
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to
access unauthorized content, change, or delete content, or perform unauthorized actions when
tampering with the mass configuration settings of endpoints on DCE.
Published: 2023-07-12T06:41:30.783Z
Updated: 2024-11-07T14:46:11.017Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-37196 |
vulnerable | 2026-06-08 06:08:14.874609 |
Details available
HIGH (8.8)
A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to
access unauthorized content, change, or delete content, or perform unauthorized actions when
tampering with the alert settings of endpoints on DCE.
Published: 2023-07-12T06:22:46.848Z
Updated: 2024-11-07T14:46:44.245Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25555 |
vulnerable | 2026-06-08 05:56:09.233621 |
Details available
MEDIUM (5.6)
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that could allow a user that knows the credentials to
execute unprivileged shell commands on the appliance over SSH.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Published: 2023-04-18T20:39:14.874Z
Updated: 2025-02-05T21:39:36.172Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25554 |
vulnerable | 2026-06-08 05:56:09.233299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25553 |
vulnerable | 2026-06-08 05:56:09.233020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25552 |
vulnerable | 2026-06-08 05:56:09.232594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25551 |
vulnerable | 2026-06-08 05:56:09.232115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25550 |
vulnerable | 2026-06-08 05:56:09.231783 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25549 |
vulnerable | 2026-06-08 05:56:09.231384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25548 |
vulnerable | 2026-06-08 05:56:09.231021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25547 |
vulnerable | 2026-06-08 05:56:09.229941 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22795 |
vulnerable | 2026-06-08 05:30:01.451575 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22794 |
vulnerable | 2026-06-08 05:30:01.450110 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.