Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
vulnerability exists that could cause a file system enumeration and file download when an
attacker navigates to the Network Management Card via HTTPS.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | Galaxy VS | v6.82 | — |
| Schneider Electric | Galaxy VL | v12.21 | — |
Advisories 1
- SEVD-2023-318-03 Galaxy VS and Galaxy VL Schneider Electric CPCERT · Apr 9, 2024