NetSight
IP …
high8.8

CVE-2023-37196

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user alrea…

Impact

A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on DCE to access unauthorized content, change, or delete content, or perform unauthorized actions when tampering with the alert settings of endpoints on DCE.

Affected products

VendorProductAffected versions
Schneider-ElectricStruxureware Data Center Expert
through 7.9.3

Weakness classification

CWE-89

References