Vulnerabilities > CVE-2023-1548 - Unspecified vulnerability in Schneider-Electric Ecostruxure Control Expert 15.1

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
schneider-electric

Summary

A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service that is part of EcoStruxure Control Expert. Affected Products: EcoStruxure Control Expert (V15.1 and above)

Vulnerable Configurations

Part Description Count
Application
Schneider-Electric
1