← CVE Intelligence

CVE-2025-50123

Schneider Electric / EcoStruxure™ IT Data Center Expert PUBLISHED

Description (CNA)

A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a privileged account when the server is accessed via a console and through exploitation of the hostname input.

Affected (CNA)

Vendor / productVersions
Schneider Electric / EcoStruxure™ IT Data Center Expertaffected 8.3 through Prior to

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.