7.0
Élevée
CVE-2022-41670 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the…
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| EcoStruxure Operator Terminal Expert 3.3 | 3.3 → dernières | Pas de correctif indiqué |
| Pro-face BLUE 3.3 | 3.3 → dernières | Pas de correctif indiqué |
Autres CVE de EcoStruxure Operator Terminal Expert
Les 6 CVE de EcoStruxure Operator Terminal Expert →
CVE-2022-41668
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to…
7.0
Élevée
CVE-2022-41669
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows…
7.0
Élevée
CVE-2022-41671
A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that…
7.0
Élevée
CVE-2022-41666
A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user…
7.0
Élevée