Schneider Electric IIoT Monitor (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: IIoT Monitor --------- Begin Update A Part 1 of 2 -------- Vulnerabilities: Path Traversal, Unrestricted Upload of File with Dangerous Type, XXE, Cryptographic Issues...

CVE-2018-7836

An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files...

CVE-2018-7836

Schneider Electric IIoT Monitor vulnerability CVE-2018-7836 (Unrestricted Upload of File with Dangerous Type) affects version 3.1.38 and earlier. The connected advisories describe a path to remote code execution via uploading malicious files, with high-severity impact (CVSS v3 base score 9.3). Ex...