CVE-2021-22719
N/A
N/A
Summary
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | C-Bus Toolkit V1.15.7 and prior | C-Bus Toolkit V1.15.7 and prior | affected |
Weaknesses
- CWE-22: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
ADP Enrichment
CVE Program Container
Additional References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01
- https://www.zerodayinitiative.com/advisories/ZDI-21-449/
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01
- https://www.zerodayinitiative.com/advisories/ZDI-21-449/
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.