The vulnerability of Schneider Electric’s automation controllers C-Bus (5500SHAC) and Wiser for C-Bus (5500SHAC) stems from the possibility of inserting commands that allow a malicious actor to execute arbitrary commands on behalf of the superuser.

The vulnerability of Schneider Electric’s automation controllers C-Bus 5500SHAC and Wiser for C-Bus 5500SHAC lies in the possibility of command injection. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on behalf of the superuser...