CVE-2023-25555: Schneider Electric Struxureware Data Center Expert

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to execute unprivileged shell commands on the appliance over SSH. Affected products: StruxureWare Data Center Expert (V7.9.2 and prior)

Affected products

• Schneider Electric Struxureware Data Center Expert: up to and including 7.9.2

Published 2023-04-18. Last modified 2026-06-17.