CVE-2021-22795

CRITICAL

StruxureWare Data Center Expert < V7.8.1 - Command Injection

Title source: llm
STIX 2.1

Description

A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over the network. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

References (1)

Core 1
Core References

Scores

CVSS v3 9.1
EPSS 0.0319
EPSS Percentile 87.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-78
Status published
Products (1)
schneider-electric/struxureware_data_center_expert < 7.8.1
Published Apr 13, 2022
Tracked Since Feb 18, 2026