Описание
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Связанные уязвимости
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Уязвимость программного средства мониторинга информации об оборудовании Schneider Electric Data Center Expert, связанная с неправильной проверкой криптографической подписи, позволяющая нарушителю выполнить произвольные скрипты bash от имени пользователя root