CVE-2021-22718: Schneider Electric C-Bus Toolkit CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CBZ files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the current user.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22718?
CVE-2021-22718 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit.
How can remote attackers exploit CVE-2021-22718?
Remote attackers can exploit CVE-2021-22718 by making the target visit a malicious page or open a malicious file.
Who is affected by CVE-2021-22718?
CVE-2021-22718 affects installations of Schneider Electric C-Bus Toolkit version 1.15.7 and prior.
What is the severity of CVE-2021-22718?
CVE-2021-22718 has a severity rating of 7.8, which is considered high.
How can I fix CVE-2021-22718?
To fix CVE-2021-22718, it is recommended to update Schneider Electric C-Bus Toolkit to the latest version available.