Schneider Electric SpaceLogic C-Bus Toolkit

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Schneider Electric Equipment : SpaceLogic C-Bus Toolkit Vulnerabilities : Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities...

CVE-2023-5402

Schneider Electric SpaceLogic C-Bus Toolkit is affected by CVE-2023-5402 (CWE-269: Improper Privilege Management). The vulnerability exists in the TransferCommand flow over the network and could enable remote code execution. Reported in multiple sources, the issue is exploitable remotely with low...

CVE-2023-5402

A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network...