CVE-2026-9717: Powerlogic P7 Firmware: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Özet bilgiler

Ürün

Schneider-electric Powerlogic P7 Firmware

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v4.0

8.6 CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%1,73 (yüzdelik 78)

CWE

CWE-78

Yama

Geçici çözüm

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• download.schneider-electric.com
• CWE-78