Skip to content
OpenAdvisories
Medium · 5.6 CVE-2023-25555 EUVD-2023-29507GHSA-pr82-5v88-8j87

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow …

Published Apr 18, 2023 · Updated Feb 5, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: StruxureWare Data Center Expert Category: ICS / OT

Description

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that could allow a user that knows the credentials to
execute unprivileged shell commands on the appliance over SSH.

Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric StruxureWare Data Center Expert All – ≤ V7.9.2 —

Advisories 1

References