CVE-2023-25552 - A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized

Back Back to CVE browser

HIGH

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized

Published Apr 18, 2023

8.1

HIGH

CVSS 3.1

EPSS 0.50%

Description

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when tampering the Device File Transfer settings on DCE endpoints.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

Vendor Schneider Electric Product StruxureWare Data Center Expert Default
unaffected
Affected
- ≥ All, ≤ V7.9.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Schneider Electric	StruxureWare Data Center Expert	unaffected	Affected ≥ All, ≤ V7.9.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

Link	Providers	Tags
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-045-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-045-02.pdf		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-29504		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner schneider

Published Apr 18, 2023

Updated Mar 3, 2025

Reserved Feb 7, 2023

Link CVE-2023-25552

CISA Vulnrichment

Updated Mar 3, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-25552

Red Hat

No data

ENISA EUVD

Assigner schneider

Published Apr 18, 2023

Updated Mar 3, 2025

Link EUVD-2023-29504

GitHub

No data