7.0
High
CVE-2022-41670 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the…
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EcoStruxure Operator Terminal Expert 3.3 | 3.3 → latest | No fix stated |
| Pro-face BLUE 3.3 | 3.3 → latest | No fix stated |
Other CVEs of EcoStruxure Operator Terminal Expert
The 6 CVEs of EcoStruxure Operator Terminal Expert →
CVE-2022-41668
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to…
7.0
High
CVE-2022-41669
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows…
7.0
High
CVE-2022-41671
A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that…
7.0
High
CVE-2022-41666
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user…
7.0
High