Vulnerability · Published Oct 11, 2024 · Assigned by schneider
CVE-2024-8531
High 7.2
In plain English
A high-severity security flaw in Data Center Expert from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.5%top 60.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | Data Center Expert | Versions 8.1.1.3 and prior |
Weakness: CWE-347 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H