CVE-2021-22720

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project.

Score

CVSS 3.1 7.2 High

Status

Modified - cybersecurity@se.com

Published

2021-04-13

Last modified

2024-08-03

Weaknesses

CWE-22

Affected products

• C-bus Toolkit (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01
• https://www.tenable.com/security/research/tra-2021-50
• https://www.zerodayinitiative.com/advisories/ZDI-21-450/