CVE-2021-22704

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer all versions prior to V6.2 SP11 , Vijeo Designer Basic all versions prior to V1.2, or EcoStruxure Machine Expert all versions prior to V2.0 that could...

CVE-2021-22704

CVE-2021-22704 is a path traversal (CWE-22) affecting Harmony HMI family products configured by Schneider Electric’s Vijeo Designer, Vijeo Designer Basic, and EcoStruxure Machine Expert. The flaw arises from improper limitation of a pathname to a restricted directory, enabling access to restricte...