CVE-2022-41667

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:*:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:hf1:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:*:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:3.3:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:3.3:hf1:*:*:*:*:*:*

History

No history.

Information

Published : 2022-11-04 12:15

Updated : 2024-02-28 19:29


NVD link : CVE-2022-41667

Mitre link : CVE-2022-41667

CVE.ORG link : CVE-2022-41667


JSON object : View

Products Affected

schneider-electric

  • pro-face_blue
  • ecostruxure_operator_terminal_expert
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')