[CVE-2026-9717] CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabili…

Descripción técnica

CWE-78 Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow unauthorized execution of commands with elevated privileges, impacting system integrity, confidentiality, and availability when a privileged authenticated user interacts with a vulnerable network-exposed service.

Puntuación CVSS

Score: 7.2/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Powerlogic p7 firmware, Powerlogic p7 — Schneider-electric

Debilidades (CWE)

CWE-78

Fuente oficial

Publicado en NIST NVD.