Description
A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software (All Versions)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ConneXium Network Manager Software (All Versions) | ConneXium Network Manager Software (All Versions) | — |
Advisories 2
- ICSA-21-287-01 Schneider Electric CNM CISA ICS & IT advisories · Oct 14, 2021
- SEVD-2021-285-02 ConneXium Network Manager (CNM) Software Schneider Electric CPCERT · Oct 12, 2021