The vulnerability, identified as CWE‑78, allows the execution of arbitrary Linux operating system commands when a system backup is restored after being maliciously modified. If an attacker can supply a specially crafted backup file, the device will execute embedded shell commands during the restoration process, potentially compromising confidentiality, integrity, and availability of the system.

Schneider Electric NetBotz 5 750/755 devices are affected. No specific version constraints were noted; all instances of this product family are vulnerable.

The CVSS score of 7.3 indicates a medium‑to‑high severity. EPSS is not available, so the exploitation probability cannot be precisely quantified, but the vulnerability permits remote code execution if the attacker can deliver a malicious backup file to the target device. It is not listed in the CISA KEV catalog, and no publicly available exploits have been reported. The attack vector is inferred to be via the backup restoration pathway, requiring the attacker to have the ability to upload or otherwise influence the backup file used by the device.