Schneider Electric Data Center Expert - upgrade bundle signature verification: Improper cryptographic signature

Impact

Improper cryptographic signature verification on DCE upgrade bundles: a manipulated bundle can carry arbitrary bash scripts that execute as root. Your patching process becomes the attack. Anyone who can place a bundle in front of the appliance - a compromised mirror, an internal file share, a helpful vendor email - gets root on the system holding the facility's power and cooling credentials.

Who can reach it

Requires getting a crafted upgrade bundle to the appliance. In practice: whoever runs DCE upgrades, or anyone who can tamper with where the bundles are staged.

What to do

Upgrade DCE per SEVD-2024-282-01 to a build that verifies signatures correctly. Until then, treat upgrade bundles as untrusted code: obtain them only over an authenticated channel from the vendor, verify hashes out of band, and stage them somewhere with restricted write access.

References