CVE-2023-25555 (published 2023-04-18T20:39:14.874Z)















A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
Command Injection') vulnerability exists that could allow a user that knows the credentials to
execute unprivileged shell commands on the appliance over SSH. 

 





 




 

 

 Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)


Affected products: Vendor: Schneider Electric
Product: StruxureWare Data Center Expert
Versions: All