CVE-2023-1049

7.8HIGH

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local fil

Veröffentlicht: 6/14/2023Aktualisiert: 11/21/2024
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

KI-AnalyseKI-gestützt

Betroffene Produkte

schneider-electricecostruxure_operator_terminal_expert
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricpro-face_blue
schneider-electricpro-face_blue
3.3
schneider-electricpro-face_blue
3.3

Referenzen