A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized location and may result in code execution on the engineering workstation when a malicious project file is loaded in the engineering software. Affected Product: EcoStruxure Control Expert (V15.0 SP1 and prior, including former Unity Pro), EcoStruxure Process Expert (2020 and prior, including former HDCS), SCADAPack RemoteConnect for x70 (All versions)
References
Link | Resource |
---|---|
https://www.se.com/ww/en/download/document/SEVD-2021-257-01/ | Mitigation Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: schneider
Published: 2022-03-28T16:25:24
Updated: 2022-04-13T15:45:24
Reserved: 2021-01-06T00:00:00
Link: CVE-2021-22797
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-04-13T16:15:09.370
Modified: 2022-04-23T02:12:28.793
Link: CVE-2021-22797
JSON object: View
Redhat Information
No data.
CWE