OS Command Injection Vulnerability in StruxureWare Data Center Expert by Schneider Electric
CVE-2023-25554
7.8HIGH
Key Information:
- Vendor
Schneider Electric
- Vendor
- CVE Published:
- 18 April 2023
What is CVE-2023-25554?
An OS Command Injection vulnerability has been discovered in StruxureWare Data Center Expert that allows attackers to escalate their privileges locally by executing specially crafted operating system commands. This vulnerability highlights the importance of securing application inputs to prevent unauthorized command execution, which could potentially compromise the integrity and confidentiality of the affected system.
Affected Version(s)
StruxureWare Data Center Expert All