CVE-2023-37198 (published 2023-07-12T06:44:34.037Z)





A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that
could cause remote code execution when an admin user on DCE uploads or tampers with install
packages. 

 




Affected products: Vendor: Schneider Electric
Product: StruxureWare Data Center Expert 
Versions: v7.9.3 and earlier