Skip to content
OpenAdvisories
High SEVD-2021-103-01 7 CVEs

C-Bus Toolkit and C-Gate Server

Published Apr 13, 2021 · Updated Nov 8, 2022 · Revision 4

Vendor: Schneider Electric Product: C-Bus Toolkit Product: C-Gate Server

Summary

Schneider Electric is aware of multiple vulnerabilities in its C-Bus Toolkit and C-Gate server products.
The C-Bus Toolkit product, which includes C-Gate Server, is an application you run on your personal computer to configure and commission C-Bus Installations.
Failure to apply the remediations provided below may risk remote code execution attack, which could result in an attacker having remote access to the computer.
November 2022 Update: The CWE for CVE-2021-22716 has been updated (marked in red). No additional action is required for customers who have already followed the remediation instructions provided below.

Vulnerabilities 7

  • High 7.8
    CVE-2021-22716

    A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code exec…

    Schneider Electric C-Bus Toolkit ICS / OT
  • Unscored —
    CVE-2021-22717 EPSS 40%

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …

  • Unscored —
    CVE-2021-22718 EPSS 28%

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …

  • Unscored —
    CVE-2021-22719 EPSS 42%

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …

  • Unscored —
    CVE-2021-22720 EPSS 31%

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus …

  • Unscored —
    CVE-2021-22748

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that coul…

  • Unscored —
    CVE-2021-22796

    A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is…

Revision history

  1. #3.1.0

    The CWE for CVE-2021-22716 has been updated (marked in red). No additional action is required for customers who have already followed the remediation instructions provided below.

  2. #3.0.0

    • C-Gate Server added as an affected product of CVE-2021-22720 • CVE-2021-22796 added • Updated the previously provided remediation • Added Tenable Security to the acknowledgement section

  3. #2.0.0

    Added CVE-2021-22748

  4. #1.0.0

    Original Release

References