ZDI-CAN-23502: ZDI-24-1420: Schneider Electric EcoStruxure Data Center Expert XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Data Center Expert. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2015-0250.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23502?
The severity of ZDI-CAN-23502 is rated at a CVSS score of 6.5, indicating a medium level of risk.
What does ZDI-CAN-23502 allow an attacker to do?
ZDI-CAN-23502 allows remote attackers to disclose sensitive information on affected installations of Schneider Electric EcoStruxure Data Center Expert.
Is authentication required to exploit ZDI-CAN-23502?
Yes, authentication is required to exploit the ZDI-CAN-23502 vulnerability.
How do I fix ZDI-CAN-23502?
To fix ZDI-CAN-23502, ensure that you apply the latest patches and updates provided by Schneider Electric for EcoStruxure Data Center Expert.
Which software is affected by ZDI-CAN-23502?
ZDI-CAN-23502 affects Schneider Electric EcoStruxure Data Center Expert.