Skip to content
OpenAdvisories
Critical · 9.1 CVE-2021-22794 EUVD-2021-9929GHSA-c53q-88xr-x99v

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code e…

Published Mar 28, 2022 · Updated Aug 3, 2024 · Assigned by schneider

Vendor: Schneider Electric Product: StruxureWare Data Center Expert Category: ICS / OT

Description

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

Affected products

VendorProductAffectedFixed
Schneider Electric StruxureWare Data Center Expert unspecified – < V7.8.1 V7.8.1

Advisories 2

References