Schneider Electric EcoStruxure and SCADAPack
Successful exploitation of this vulnerability could result in code execution on the engineering workstation.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-22797US | high7.8 | — | ||
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal) vulnerability exists that could cause malicious script to be deployed in an unauthorized loc… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- MitigationEcoStruxure Control Expert
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- MitigationEcoStruxure Process Expert
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- MitigationSCADAPack RemoteConnect for x70
Compute a checksum on all project files and check the consistency of the checksum to verify the integrity before usage.
- BehobenEcoStruxure Control Expert
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
- BehobenEcoStruxure Process Expert
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
- BehobenSCADAPack RemoteConnect for x70
Harden the workstations running EcoStruxure Control Expert, EcoStruxure Process Expert, or SCADAPack RemoteConnect.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan