Schneider Electric C-Bus Toolkit
3 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-5399 | v1.16.3 and prior | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of | CRITICAL 9.8 | 35 % | ||
| CVE-2023-5402 | v1.16.3 and prior | A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used ove | CRITICAL 9.8 | 0.7 % | ||
| CVE-2021-22716 | V – < 1.15.9 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivi | HIGH 7.8 | 0.8 % |