This vulnerability (CWE-78) in Schneider Electric PowerLogic™ P7 involves improper neutralization of special elements used in OS commands, enabling a privileged authenticated user to execute arbitrary OS commands with elevated privileges through a network-exposed service. The CVSS 4.0 score of 8.6 reflects high impact on confidentiality, integrity, and availability with network attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is currently available to confirm remediation status.

Successful exploitation allows unauthorized execution of OS commands with elevated privileges by a privileged authenticated user, compromising system integrity, confidentiality, and availability. This could lead to full control over the affected system components accessible via the vulnerable network service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable network-exposed service to trusted users only and monitor for suspicious activity involving privileged accounts.