Description
A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | unspecified – < V7.8.1 | V7.8.1 |
Advisories 2
- ICSA-21-257-03 Schneider Electric Struxureware Data Center Expert CISA ICS & IT advisories · Sep 14, 2021
- SEVD-2021-257-03 StruxureWare Data Center Expert Schneider Electric CPCERT · Sep 14, 2021