CVE Published: 18/04/2023 |
CVE Updated: 02/08/2024 |
CVE Year: 2023 Source: schneider |
Vendor: Schneider Electric |
Product: StruxureWare Data Center Expert Status : PUBLISHED
CVE-2023-25555 Description
A CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS
Command Injection\') vulnerability exists that could allow a user that knows the credentials to
execute unprivileged shell commands on the appliance over SSH.
Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)
Metrics
CVSS Version: 3.1 |
Base Score: 5.6 MEDIUM Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L