Schneider Electric Modicon Path Traversal (CVE-2022-34762)

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 an...

CVE-2022-34762

The CVE-2022-34762 entry describes a path traversal (CWE-22) affecting Schneider Electric devices: the X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later) and the OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior). The vulnerability could allow loading of unautho...