CVE-2025-50123

HIGH
STIX 2.1 vulnerability

Record summary

CVE-2025-50123 has a selected CVSS score of 7.2 (high).

Description

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account when the server is accessed via a console and through exploitation of the hostname input.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 11, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

EcoStruxure™ IT Data Center Expert

Browse Schneider Electric / EcoStruxure™ IT Data Center Expert

Default status: unaffected

CVE List8.3 to ≤ Prior toaffected

References

4