CVE-2023-25550

Name of the Vulnerable Software and Affected Versions StruxureWare Data Center Expert versions prior to 7.9.2

Description The issue is related to improper control of code generation, allowing remote code execution via the hostname parameter when maliciously crafted hostname syntax is entered. This can enable a remote attacker to execute arbitrary code.

Recommendations For versions prior to 7.9.2, consider disabling the use of the hostname parameter until a patch is available to prevent remote code execution. Restrict access to the system to minimize the risk of exploitation.