Schneider Electric C-Bus Toolkit vulnerabilities

8 CVEs affecting Schneider Electric C-Bus Toolkit, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5402, published 2023-10-04.

More from Schneider Electric.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-22719, published 2021-04-13. High severity, CVSS 8.8. EPSS: 40.6% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file…
• CVE-2021-22717, published 2021-04-13. High severity, CVSS 8.8. EPSS: 38.9% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when…
• CVE-2021-22720, published 2021-04-13. High severity, CVSS 7.2. EPSS: 30.5% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when…
• CVE-2021-22718, published 2021-04-13. High severity, CVSS 7.8. EPSS: 27.2% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when…
• CVE-2021-22784, published 2021-07-21. Medium severity, CVSS 5.7. EPSS: 12.1% chance of exploitation in the next 30 days. A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the…
• CVE-2021-22748, published 2022-02-11. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved. Affected Product: C-Bus…
• CVE-2021-22716, published 2021-04-13. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit…
• CVE-2023-5402, published 2023-10-04. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.