Description
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | NetBotz 5 - 750/755 | Versions 5.5.2 and prior | — |
Advisories 2
- ICSA-26-260-05 Schneider Electric NetBotz 5 750/755 CISA ICS & IT advisories · Sep 17, 2026
- SEVD-2026-223-02 Multiple Vulnerabilities on NetBotz 5 750/755 Products Schneider Electric CPCERT · Aug 11, 2026