CVE-2023-25552CWE-862

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing…

High · published April 18, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized

content, changes or deleting of content, or performing unauthorized functions when tampering

the Device File Transfer settings on DCE endpoints.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00502 · 42.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-04-18T20:33Z
EPSS history
Timeline
  • 18 APR 20:33Z
    A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing…
    cvelistv5