Description
A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that allows a local privilege escalation on the appliance
when a maliciously crafted Operating System command is entered on the device.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | StruxureWare Data Center Expert | All – ≤ V7.9.2 | — |
Advisories 1
- SEVD-2023-045-02 StruxureWare Data Center Expert Schneider Electric CPCERT · Feb 14, 2023