CVE-2026-77120

Awaiting Analysis Awaiting Analysis - Queue

OS Command Injection in SE OS Console

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Schneider Electric SE

Description

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause privilege escalation to root and unauthorized execution of administrative functions when an authenticated user with SSH enabled interacts with the operating system console that improperly processes user-controlled input.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-29

NVD

CVE-2026-77120

EUVD

EUVD-2026-75107

Affected Vendors & Products

Vendor	Product	Version / Range
schneider_electric	powerlogic_t300	2.9.8-5621

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-78	The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is an OS Command Injection vulnerability (CWE-78) in Schneider Electric's PowerLogic T300 device. It allows authenticated users with SSH access to escalate privileges to root and execute unauthorized administrative functions by manipulating user-controlled input in the operating system console.

Detection Guidance

Detecting this vulnerability requires checking the PowerLogic T300 firmware version. Use SSH to connect to the device and run the command 'show version' or 'get system info' to verify if the version is 2.9.8-5620 or earlier.

Impact Analysis

An attacker could gain full control over the affected device, leading to unauthorized administrative actions, potential system compromise, and disruption of power distribution networks. This could result in operational disruptions, data breaches, or physical damage to infrastructure.

Compliance Impact

This vulnerability could lead to non-compliance with regulations requiring strict access controls and data protection, such as GDPR (data breaches) and HIPAA (unauthorized access to sensitive systems). Failure to address it may result in legal penalties and reputational damage.

Mitigation Strategies

Immediately update the firmware to version 2.9.8-5621 provided by Schneider Electric. If patching is delayed, remove the ENGINEER role or restrict its permissions and isolate the system behind firewalls.

Hi! I’m here to help you understand CVE-2026-77120. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70