Schneider Electric Struxureware Data Center Expert
view advisory published 2021-09-14
Successful exploitation of these vulnerabilities could allow remote code execution.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22795US | critical9.8 | — | ||
A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over… | ||||
| CVE-2021-22794US | critical9.8 | — | ||
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationStruxureware Data Center
Do not allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
- MitigationStruxureware Data Center
Do not allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan