CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
- Score
- CVSS 3.1 7.2 High
- Status
- Deferred - cybersecurity@se.com
- Published
- 2024-10-11
- Last modified
- 2024-10-15
- Weaknesses
- CWE-347
Affected products
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_…
