CVE-2023-1049

7.8HIGH

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local fil

Published: 6/14/2023Updated: 11/21/2024
View on NVDView on MITRE

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

AI AnalysisPowered by AI

Affected Products

schneider-electricecostruxure_operator_terminal_expert
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricpro-face_blue
schneider-electricpro-face_blue
3.3
schneider-electricpro-face_blue
3.3

References