CVE:CVE-2023-25556
CNNVD:CNNVD-202304-1435
Schneider Electric StruxureWare Data Center Expert（StruxureWare数据中心管理专家）是法国施耐德电气（Schneider Electric）公司的一种监控软件。适用于各种组织监控其全公司范围内的电力、制冷、安全、环境。
Schneider Electric StruxureWare Data Center Expert 7.9.2 版本之前存在授权问题漏洞，该漏洞源于存在不正确的身份验证漏洞，当输入少于七位数字的密钥并且攻击者可以访问 KNX 安装时，可能会导致设备受到损害。
solution:Upgrade schneider-electric merten_instabus_tastermodul_1fach_system_m_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade schneider-electric merten_instabus_tastermodul_2fach_system_m_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade schneider-electric merten_tasterschnittstelle_4fach_plus_firmware to a higher version than 1.0,1.2,and avoid the version 1.0,1.2; Upgrade schneider-electric merten_knx_argus_180/2,20m_up_system_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade schneider-electric merten_jalousie-/schaltaktor_reg-k/8x/16x/10_m._hb_firmware to a higher version than 1.0,and avoid the version 1.0; Upgrade schneider-electric merten_knx_uni-dimmaktor_ll_reg-k/2x230/300_w_firmware to a higher version than 1.0,1.1,and avoid the version 1.0,1.1; Upgrade schneider-electric merten_knx_schaltakt.2x6a_up_m.2_eing._firmware to a higher version than 0.1,and avoid the version 0.1