Schneider Electric EcoStruxure and SCADAPack

Summary

Vulnerabilities 1

• High 7.8
  CVE-2021-22797 EPSS 26%

  A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could…

  Schneider Electric EcoStruxure Control Expert EcoStruxure™ Process Expert SCADAPack RemoteConnect for x70 ICS / OT
  Mar 28, 2022

Revision history

1. 2021-09-16 #1

   ICSA-21-259-02 Schneider Electric EcoStruxure and SCADAPack

References

• ICS Advisory ICSA-21-259-02 Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-21-259-02
• Recommended Practices
  https://us-cert.cisa.gov/ncas/tips/ST04-014
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B