Vulnerability in Schneider Electric Data Center Expert
CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center Expert software when an upgrade bundle is manipulated to include arbitrary bash scripts that are executed as root.
EPSS: 0.004 (35.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Schneider Electric Data Center Expert — versions Versions 8.1.1.3 and prior
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2024-8531?
- CVE-2024-8531 is a high-severity vulnerability in Schneider Electric Data Center Expert, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.2/10. Published 2024-10-11.
- How severe is CVE-2024-8531?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2024-8531 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.