Skip to content
OpenAdvisories
High · 7.2 CVE-2025-50123 EUVD-2025-21130GHSA-qcfj-h4p2-g2fw

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a pri…

Published Jul 11, 2025 · Updated Nov 4, 2025 · Assigned by schneider

Vendor: Schneider Electric Product: EcoStruxure™ IT Data Center Expert Category: ICS / OT

Description

A

CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote
command execution by a privileged account when the server is accessed via a console and through
exploitation of the hostname input.

Affected products

VendorProductAffectedFixed
Schneider Electric EcoStruxure™ IT Data Center Expert 8.3 – ≤ Prior to —

Advisories 3

References