Path Traversal Vulnerability in C-Bus Toolkit and C-Gate Server by Schneider Electric
CVE-2021-22748

8.8HIGH

Key Information:

Vendor

Schneider Electric
Status
C-bus Toolkit (v1.15.9 And Prior), C-gate Server (v2.11.7 And Prior)
Vendor
CVE Published:
11 February 2022

What is CVE-2021-22748?

A vulnerability exists in the C-Bus Toolkit and C-Gate Server that allows an attacker to exploit improper restrictions on file paths. By leveraging this flaw, a remote attacker could potentially execute malicious code when a file is saved, leading to unauthorized access and control of the system.

Affected Version(s)

C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)

References

http://download.schneider-electric.com/files?p_Doc_Ref=SE...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.