Path Traversal Vulnerability in Schneider Electric X80 and OPC UA Communication Modules

CVE-2022-34762

Summary

A vulnerability exists in the X80 Advanced RTU Communication Module and OPC UA Modicon Communication Module due to improper path restrictions. This weakness allows unauthorized loading of firmware images by targeting the firmware image path, potentially leading to the execution of unsigned firmware. Both the affected modules can be exploited by malicious users who manipulate the path, compromising the integrity and security of the systems. It is crucial for users of these products to implement security measures and updates to mitigate the risks associated with this vulnerability.

References