PT-2021-7775 · Unknown · C-Bus Toolkit+1

Published 2021-04-13 · Updated 2022-02-23 · CVE-2021-22748

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions C-Bus Toolkit versions 1.15.9 and prior C-Gate Server versions 2.11.7 and prior

Description The issue exists due to improper limitation of a pathname to a restricted directory, also known as a path traversal vulnerability. This could allow a remote attacker to execute arbitrary code when a file is saved.

Recommendations For C-Bus Toolkit versions 1.15.9 and prior, update to a version later than 1.15.9 to resolve the issue. For C-Gate Server versions 2.11.7 and prior, update to a version later than 2.11.7 to resolve the issue. As a temporary workaround, consider restricting access to the directory where files are saved to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2023-02715

CVE-2021-22748

ZDI-21-1279

Affected Products

C-Bus Toolkit

C-Gate Server

References · 7

• https://osv.dev/vulnerability/CVE-2021-22748 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1279 · Security Note
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02715 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-22748 · Security Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-01_C-Bus_Toolkit_C-Gate_Server_Security_Notification.pdf · Note
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-01_C-Bus_Toolkit_C-Gate_Server_Security_Notification.pdf · Note