Schneider Electric EcoStruxure and SCADAPack
Successful exploitation of this vulnerability could result in code execution on the engineering workstation.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-22797US | high7.8 | — | ||
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized loc… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- MitigationEcoStruxure Control Expert
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- MitigationEcoStruxure Process Expert
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- MitigationSCADAPack RemoteConnect for x70
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- FixedEcoStruxure Control Expert
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
- FixedEcoStruxure Process Expert
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
- FixedSCADAPack RemoteConnect for x70
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan