EUVD-2026-69134
GHSA-hq47-cf6c-9h3p
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent-network access and a valid low-privilege account are both required; confidentiality and integrity impact are limited to the local database with no availability or scope-change effect.
Primary rating from Vendor (schneider).
CVSS VectorVendor: schneider
Lifecycle Timeline
1DescriptionCVE.org
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui.
AnalysisAI
HQL injection in Schneider Electric NetBotz 5 models 750 and 755 allows an authenticated attacker on the same adjacent network segment to inject malicious Hibernate Query Language statements through the appliance's web service interface or web UI, gaining limited unauthorized read and write access to the NetBotz database. The CVSS 4.0 score of 5.1 reflects a constrained attack surface - both network adjacency and a valid low-privilege account are prerequisites. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all three of the following: (1) the attacker holds a valid low-privilege account on the NetBotz 5 750/755 appliance (PR:L confirmed by CVSS); (2) the attacker is positioned on the same adjacent network segment as the appliance (AV:A - internet-based remote exploitation is structurally excluded); (3) the attack is delivered through the appliance's web service interface or web UI, both of which must be reachable from the attacker's position. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-supplied CVSS 4.0 vector AV:A/AC:L/AT:N/PR:L/UI:N with impacts VC:L/VI:L/VA:N yields a score of 5.1 (Medium), which accurately reflects the bounded threat. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult Schneider Electric advisory SEVD-2026-223-02 at https://download.se.com/files?p_Doc_Ref=SEVD-2026-223-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2026-223-02.pdf for the authoritative patched firmware version - no specific fix version was included in the available intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Netbotz 5 750 755
View allSame weakness CWE-564 – SQL Injection: Hibernate
View allShare
External POC / Exploit Code
Leaving vuln.today