Vulnerability CVE-2024-8531


Published: 2024-10-11

Description:
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could
compromise the Data Center Expert software when an upgrade bundle is manipulated to
include arbitrary bash scripts that are executed as root.

Type:

CWE-347

(Improper Verification of Cryptographic Signature)

 References:
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-01.pdf

Copyright 2024, cxsecurity.com

 

Back to Top