Path Traversal Vulnerability in C-Bus Toolkit and C-Gate Server by Schneider Electric
CVE-2021-22748
8.8HIGH
Key Information:
- Vendor
- Schneider Electric
- Vendor
- CVE Published:
- 11 February 2022
Summary
A vulnerability exists in the C-Bus Toolkit and C-Gate Server that allows an attacker to exploit improper restrictions on file paths. By leveraging this flaw, a remote attacker could potentially execute malicious code when a file is saved, leading to unauthorized access and control of the system.
Affected Version(s)
C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved