Description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric SE | IIoT Monitor 3.1.38 | IIoT Monitor 3.1.38 | — |
Advisories 1
- ICSA-19-008-02 Schneider Electric IIoT Monitor (Update A) CISA ICS & IT advisories · Jan 15, 2019