Description
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | EcoStruxure™ IT Data Center Expert (Formerly known as StruxureWare Data Center Expert) | Versions 9.1.2 and prior | — |
Advisories 1
- SEVD-2026-251-01 Multiple Vulnerabilities on EcoStruxure IT Data Center Expert Schneider Electric CPCERT · Sep 8, 2026