Описание
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
EPSS
7.2 High
CVSS3
Дефекты
Связанные уязвимости
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Уязвимость программного средства мониторинга информации об оборудовании Schneider Electric Data Center Expert, связанная с неправильной проверкой криптографической подписи, позволяющая нарушителю выполнить произвольные скрипты bash от имени пользователя root
EPSS
7.2 High
CVSS3