Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | C-Bus Toolkit v1.15.8 and prior | C-Bus Toolkit v1.15.8 and prior | — |
Advisories 2
- ICSA-21-194-01 Schneider Electric C-Bus Toolkit CISA ICS & IT advisories · Jul 13, 2021
- SEVD-2021-194-04 C-Bus Toolkit Schneider Electric CPCERT · Jul 13, 2021