Known vulnerabilities in Struxureware Data Center Expert

Vendor: Schneider Electric
Software: Struxureware Data Center Expert
Software CPE: cpe:2.3:a:schneider_electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Struxureware Data Center Expert Struxureware Data Center Expert is affected by 4 known vulnerabilities: 1 medium, 3 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98731 - Missing Authentication for Critical Function
CVE-2024-8530		 CWE-306 Medium
No
No
 8.2 16.10.2024 SB2024101655
#VU98729 - Improper Verification of Cryptographic Signature
CVE-2024-8531		 CWE-347 Low
No
No
 8.2 16.10.2024 SB2024101655
#VU56611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22794		 CWE-22 Low
No
No
 - 15.09.2021 SB2021091511
#VU56609 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22795		 CWE-78 Low
No
No
 - 15.09.2021 SB2021091511