Schneider Electric C-Bus Toolkit
3 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-5399 | v1.16.3 and prior | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of | CRITICAL 9.8 | 35 % | ||
| CVE-2023-5402 | v1.16.3 and prior | A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used ove | CRITICAL 9.8 | 0.7 % | ||
| CVE-2021-22716 | V – < 1.15.9 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivi | HIGH 7.8 | 0.8 % |