Approved changes feed: RSS · Atom

cpe:2.3:a:schneider-electric:data_center_expert:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSchneider Electric (e6a779d5-aeb8-5b94-be36-761d5c05741c)
ProductData Center Expert (eb58fabe-b67a-54c6-ada8-4460a86c00b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8531 vulnerable 2026-06-08 07:00:24.860433 Details available
HIGH (7.2)
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Published: 2024-10-11T13:50:31.474Z
Updated: 2024-10-15T14:46:55.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8530 vulnerable 2026-06-08 07:00:24.858747 Details available
MEDIUM (5.9)
CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS.
Published: 2024-10-11T13:55:30.353Z
Updated: 2024-10-17T19:54:14.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32521 vulnerable 2026-06-08 05:44:44.914088 Details available
HIGH (7.1)
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server. Affected Products: Data Center Expert (Versions prior to V7.9.0)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:07:44.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32520 vulnerable 2026-06-08 05:44:44.913748 Details available
HIGH (8)
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. This CVE is unique from CVE-2022-32518. Affected Products: Data Center Expert (Versions prior to V7.9.0)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:07:51.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32519 vulnerable 2026-06-08 05:44:44.913387 Details available
HIGH (8)
A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-02-05T20:07:58.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-32518 vulnerable 2026-06-08 05:44:44.912905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.