Lucene search
PRIOn knowledge basePRION:CVE-2021-22797HistoryApr 13, 2022 - 4:15 p.m.
Path traversal
2022-04-1316:15:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
59.1%
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)
| CPE | Name | Operator | Version |
|---|---|---|---|
| ecostruxure_control_expert | lt | 15.1 | |
| ecostruxure_process_expert | lt | 2021 |
Related
cve
cve
CVE-2021-22797
2022-04-13 16:15:09
zdi
zdi
nvd
nvd
CVE-2021-22797
2022-04-13 16:15:09
ics
ics
Schneider Electric EcoStruxure and SCADAPack
2021-09-20 12:00:00
cvelist
cvelist
CVE-2021-22797
2022-03-28 16:25:24