CVE-2021-22719

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when a file is uploaded...

CVE-2021-22718

Schneider Electric C-Bus Toolkit is affected by CVE-2021-22718 (Path Traversal). The Red Hat, NVD, and CVE ecosystem describe a CWE-22 path traversal flaw in C-Bus Toolkit versions 1.15.7 and earlier that could allow remote code execution when restoring project files. The ZDI advisory confirms co...

CVE-2021-22718

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring project files...

CVE-2021-22716

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit V1.15.9 and prior...

CVE-2021-22716

The CVE-2021-22716 entry concerns Schneider Electric C-Bus Toolkit (versions up to v1.15.9) with an Improper Permission Assignment for Critical Resource vulnerability that could allow remote code execution when an unprivileged user modifies a file. The root cause is incorrect permissions on criti...

Schneider Electric C-Bus Toolkit 权限许可和访问控制问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A privilege permission and access control issue vulnerability exists in C-Bus Toolkit V1.15.7 and prior versions, which arises fr...

CVE-2021-22717: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when processing config files...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

施耐德电气 C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to...

CVE-2021-22718: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring project files...

PT-2021-7775

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.9 and prior C-Gate Server versions 2.11.7 and prior Description The issue exists due to improper limitation of a pathname to a restricted directory, also known as a path traversal vulnerability. This could allow a...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in versions of C-Bus Toolkit prior to V1.15.7, which can be exploited by an attacker to execute arbitrary code...

CVE-2021-22719: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when a file is uploaded...

CVE-2021-22716: Incorrect Permission Assignment for Critical Resource

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit V1.15.9 and prior...

PT-2021-7831

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.7 and prior Description A path traversal issue exists that could allow remote code execution when processing config files. This is due to improper limitation of a pathname to a restricted directory. The vulnerabilit...

PT-2021-7826

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.9 and prior C-Gate Server versions 2.11.7 and prior Description A vulnerability exists that could allow remote code execution when a malicious file is uploaded, due to improper authentication. This issue is related ...

CVE-2021-22720: Improper Limitation of a Pathname to a Restricted Directory

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring a project...

PT-2021-6926

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.7 and prior Description A path traversal vulnerability exists that could allow a remote code execution when restoring a project. This issue is due to improper limitation of a pathname to a restricted directory, whic...

PT-2021-7584

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.7 and prior Description A path traversal issue exists that could allow remote code execution when restoring project files. This could be exploited by an attacker using a specially crafted malicious file or webpage,...