Description
A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | C-Bus Toolkit | V – < 1.15.9 | 1.15.9 |
Advisories 2
- SEVD-2021-103-01 C-Bus Toolkit and C-Gate Server Schneider Electric CPCERT · Nov 8, 2022
- ICSA-21-105-01 Schneider Electric C-Bus Toolkit CISA ICS & IT advisories · Apr 15, 2021