Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path
Traversal') vulnerability exists that could cause tampering of files on the personal computer
running C-Bus when using the File Command.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | C-Bus Toolkit | v1.16.3 and prior | — |
Advisories 2
- ICSA-23-306-06 Schneider Electric SpaceLogic C-Bus Toolkit CISA ICS & IT advisories · Nov 2, 2023
- SEVD-2023-283-01 SpaceLogic C-Bus Toolkit Schneider Electric CPCERT · Oct 10, 2023