CVE-2023-1049

7.8HIGH

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local fil

发布于: 6/14/2023更新于: 11/21/2024

描述

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI.

AI分析AI驱动

受影响产品

schneider-electricecostruxure_operator_terminal_expert
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricecostruxure_operator_terminal_expert
3.3
schneider-electricpro-face_blue
schneider-electricpro-face_blue
3.3
schneider-electricpro-face_blue
3.3

参考资料