Description

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party. Affected Products: Data Center Expert (Versions prior to V7.9.0)

Related CPE's

a

schneider-electric

data_center_expert

Vulnerable

References

https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-04_+Data_Center_Expert_Security_Notification.pdf&p_Doc_Ref=SEVD-2022-165-04

PatchRelease NotesVendor Advisory

https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-04_+Data_Center_Expert_Security_Notification.pdf&p_Doc_Ref=SEVD-2022-165-04

PatchRelease NotesVendor Advisory

Weaknesses

[email protected]

Secondary
CWE-257

[email protected]

Primary
CWE-522

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

8 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-01-30T22:15:10.403Z

2 years ago

Last modified

2024-11-21T06:06:32.693Z

1 year ago