Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Schneider Electric StruxureWare Data Center Expert V7.8.1 Clear all filters
TI-2021-05675 CVE-2021-22795 · GHSA-9pc8-6crf-r3rv

OS command injection in Schneider Electric StruxureWare Data Center Expert

Priority MEDIUM 48

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03122 Published 2022-03-28 Fixed in V7.8.1 CWE-78
TI-2021-05674 CVE-2021-22794 · GHSA-c53q-88xr-x99v

Path traversal in Schneider Electric StruxureWare Data Center Expert

Priority MEDIUM 46

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02216 Published 2022-03-28 Fixed in V7.8.1 CWE-22