| Package | Affected versions | Patched versions |
|---|---|---|
| ecostruxure automation expert | < 25.0.1 | 25.0.1 |
CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exist that could cause execution of untrusted commands on the engineering workstation which could result in a limited compromise of the workstation and a potential loss of Confidentiality, Integrity and Availability of the subsequent system when an authenticated user opens a malicious project file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free