Known vulnerabilities in Struxureware Data Center Expert 7.8.1

Vendor: Schneider Electric
Software: Struxureware Data Center Expert
Version: 7.8.1
Software CPE: cpe:2.3:a:schneider_electric:struxureware_data_center_expert:*:*:*:*:*:*:*:*
Website: https://www.schneider-electric.com/ww/en/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Struxureware Data Center Expert version 7.8.1 Struxureware Data Center Expert 7.8.1 is affected by 2 vulnerabilities: 2 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-22794		 CWE-22 Low
No
No
 - 15.09.2021 SB2021091511
#VU56609 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22795		 CWE-78 Low
No
No
 - 15.09.2021 SB2021091511