Malicious File Tampering Risk

CVE-2024-2602

Summary

A vulnerability related to improper restriction of a pathname allows for path traversal attacks in Schneider Electric software. This flaw potentially enables remote code execution if an authenticated user interacts with a project file that has been maliciously altered. Attackers can exploit this vulnerability, leading to significant security risks for affected users who may inadvertently execute compromised project files.

References