CVE-2023-37196 (published 2023-07-12T06:22:46.848Z)

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to
access unauthorized content, change, or delete content, or perform unauthorized actions when
tampering with the alert settings of endpoints on DCE.


Affected products: Vendor: Schneider Electric
Product: StruxureWare Data Center Expert 
Versions: v7.9.3 and earlier