Most recent entries from all

certfr-2021-avi-705 — De multiples vulnérabilités ont été découvertes dans les produits Schneider. Certaines d'entre elles permettent à un at…

certfr-2021-avi-705

EUVD-2026-23127

fkie_cve-2021-22794

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

GHSA-c53q-88xr-x99v

gsd-2021-22794

ICSA-21-257-03 — Schneider Electric Struxureware Data Center Expert

The affected product is vulnerable to an OS command injection, which may allow an attacker to remotely execute code over the network.CVE-2021-22795 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). The affected product is vulnerable to directory traversal, which may allow an attacker to remotely execute code.CVE-2021-22794 has been assigned to this vulnerability. A CVSS v3 base score of 9.1 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

SEVD-2021-257-03 — StruxureWare Data Center Expert

Schneider Electric is aware of multiple vulnerabilities in its StruxureWare Data Center Expert product. StruxureWare Data Center Expert provides an efficient way for organizations to monitor and manage their company-wide multi-vendor physical infrastructure; power, cooling, security and environment. Failure to apply the mitigations provided below may risk remote code execution, which could result in downtime or outage.