CVE-2023-27976

A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Score

CVSS 3.1 8.8 High

Status

Modified - cybersecurity@se.com

Published

2023-04-18

Last modified

2025-02-05

Weaknesses

CWE-668

Affected products

• Ecostruxure Control Expert (Schneider-electric)
• Ecostruxure Control Expert (Schneider Electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-03&p_enDocType=Security+and+Safety+Notice&p_File_…