CVE-2023-37197 (published 2023-07-12T06:41:30.783Z)



A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command
('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to
access unauthorized content, change, or delete content, or perform unauthorized actions when
tampering with the mass configuration settings of endpoints on DCE. 




Affected products: Vendor: Schneider Electric
Product: StruxureWare Data Center Expert 
Versions: v7.9.3 and earlier