CVE-2017-8371

概要

参考情報

• download.schneider-electric.com/files · Mitigation
• datacenterdynamics.com/content-tracks/security-risk/schneider-patches-critical-vulnerability-in-struxureware-dcim/97738.fullarticle · Third Party Advisory

struxureware data center expert のその他の脆弱性

• CVE-2026-8045中 6.5CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists that could cause information disclosure of server-side fi…
• CVE-2023-37199高 7.2 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an adm…
• CVE-2023-37198高 7.2 A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an…
• CVE-2023-37197高 8.8 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that co…
• CVE-2023-37196高 8.8 A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that coul…