Vulnerabilities > Schneider Electric > C BUS Toolkit > 1.15.9

DATE CVE VULNERABILITY TITLE RISK
2023-10-04 CVE-2023-5402 Improper Privilege Management vulnerability in Schneider-Electric C-Bus Toolkit
A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.
network
low complexity
schneider-electric CWE-269
critical
9.8
2022-02-11 CVE-2021-22748 Path Traversal vulnerability in Schneider-Electric C-Bus Toolkit 1.15.8/1.15.9
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved.
network
low complexity
schneider-electric CWE-22
6.5