CVE-2023-25554: Schneider Electric Struxureware Data Center Expert

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance when a maliciously crafted Operating System command is entered on the device. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

• Schneider Electric Struxureware Data Center Expert: up to and including 7.9.2

Published 2023-04-18. Last modified 2026-06-17.