CVE-2021-22719: Schneider Electric C-Bus Toolkit FILE UPLOAD Unrestricted File Upload Remote Code Execution Vulnerability
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the processing of commands sent to the C-Gate 2 Service. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-22719?
CVE-2021-22719 is a vulnerability in Schneider Electric C-Bus Toolkit that allows remote attackers to execute arbitrary code on affected installations.
How severe is CVE-2021-22719?
CVE-2021-22719 has a severity value of 8.8, indicating a high severity.
What is the affected software for CVE-2021-22719?
The affected software for CVE-2021-22719 is Schneider Electric C-Bus Toolkit version 1.15.7.
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers who bypass the existing authentication mechanism.
Are there any references for CVE-2021-22719?
Yes, you can find references for CVE-2021-22719 at the following links: - Schneider Electric advisory: [link1] - CISA advisory: [link2] - Zero Day Initiative advisory: [link3]