EUVD-2017-18879

Malware in sbrugna...

Schneider Electric StruxureOn Gateway Remote Code Execution Vulnerability

Schneider Electric StruxureOn Gateway is a security gateway software from Schneider Electric France. The software is able to manage network devices and provide monitoring and alarm services through the data center. A remote code execution vulnerability exists in Schneider Electric StruxureOn...

Schneider Electric StruxureOn Gateway Detection

Detection of Schneider Electric StruxureOn Gateway. The script sends a connection request to the server and attempts to detect Schneider Electric StruxureOn Gateway and to extract its version. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced...

Schneider Electric StruxureOn Gateway

CVSS v3 7.2 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: StruxureOn Gateway Vulnerability: Unrestricted Upload of File with Dangerous Type AFFECTED PRODUCTS Schneider Electric reports that the vulnerability affects the following versions of...

Remote code execution

A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution...

CVE-2017-9970

A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution...

CVE-2017-9970

A remote code execution vulnerability exists in Schneider Electric's StruxureOn Gateway versions 1.1.3 and prior. Uploading a zip which contains carefully crafted metadata allows for the file to be uploaded to any directory on the host machine information which could lead to remote code execution...

CVE-2017-9970

Schneider Electric StruxureOn Gateway (versions up to 1.1.3) is affected by CVE-2017-9970. The vulnerability arises from unrestricted upload of a ZIP with crafted metadata, enabling remote code execution by placing a file in an arbitrary host directory. Public sources cite a CVSSv3 base score of ...