C-Bus Toolkit vulnerabilities

2 known vulnerabilities in C-Bus Toolkit from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  C-Bus Toolkit: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-5399Oct 4, 2023Schneider ElectricEPSS 36.4%

  A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.

• 9.8 Critical severity

  C-Bus Toolkit: Improper Privilege Management

  CVE-2023-5402Oct 4, 2023Schneider Electric

  A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.