CVE-2023-5399: Path Traversal
Published Oct 4, 2023
·Updated
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.
Affected Software
1 affected component
Schneider-electric Spacelogic C-bus Toolkit<1.16.4
Event History
Oct 4, 2023
CVE Published
via MITRE·06:07 PM
Data Sourced
via MITRE·06:07 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-5399.
2
What is the severity of CVE-2023-5399?
The severity of CVE-2023-5399 is critical with a severity value of 9.8.
3
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-22.
4
Which software is affected by CVE-2023-5399?
The Schneider-electric Spacelogic C-bus Toolkit version 1.16.4 is affected by CVE-2023-5399.
5
How can I fix CVE-2023-5399?
To fix CVE-2023-5399, it is recommended to update the Schneider-electric Spacelogic C-bus Toolkit to a version that is not affected by the vulnerability.