Schneider Electric Struxureware Data Center Expert
Advisory ansehen veröffentlicht 2021-09-14
Successful exploitation of these vulnerabilities could allow remote code execution.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-22795US | critical9.8 | — | ||
A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over… | ||||
| CVE-2021-22794US | critical9.8 | — | ||
A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (2)
- MitigationStruxureware Data Center
Do not allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
- MitigationStruxureware Data Center
Do not allow mobile devices that have connected to any other network besides the intended network to connect to the safety or control networks without proper sanitation.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan