Description
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path
Traversal') vulnerability exists that could result in remote code execution when an authenticated
user executes a saved project file that has been tampered by a malicious actor.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | FoxRTU Station | All versions prior to v9.3.0 | — |
Advisories 2
- ICSA-24-345-03 Schneider Electric FoxRTU Station CISA ICS & IT advisories · Jul 9, 2024
- SEVD-2024-191-03 EcoStruxure Foxboro SCADA FoxRTU Station Schneider Electric CPCERT · Jul 9, 2024