Schneider Electric C-Bus Toolkit

🗓️ 15 Apr 2021 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 59 Views

Schneider C-Bus Toolkit v1.15.7 and prior, Improper Privilege Management and Path Traversal vulnerabilities, remote code execution risk

Reporter	Title	Published	Views	Family All 51
BDU FSTEC	The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.	27 Apr 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the C-Bus Toolkit software lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges or execute arbitrary code.	13 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the C-Bus Toolkit software lies in the improper limitation of the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.	18 Jan 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.	28 Jun 202300:00	–	bdu_fstec
CNNVD	施耐德电气 C-Bus Toolkit 路径遍历漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	Schneider Electric C-Bus Toolkit 权限许可和访问控制问题漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞	13 Apr 202100:00	–	cnnvd
CNNVD	施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞	13 Apr 202100:00	–	cnnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2021/icsa-21-105-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-21-105-01
us-cert	www.us-cert.cisa.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B

15 Apr 2021 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 3.17.8 - 8.8

EPSS0.40582