CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-5399

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.251

EPSS Ranking 95.9%

CVSS Severity

CVSS v3 Score 9.8

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-283-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-283-01.pdf

Products affected by CVE-2023-5399

Schneider-Electric » Spacelogic C-Bus Toolkit » Version: N/A

cpe:2.3:a:schneider-electric:spacelogic_c-bus_toolkit:-
Schneider-Electric » Spacelogic C-Bus Toolkit » Version: 1.16.3

cpe:2.3:a:schneider-electric:spacelogic_c-bus_toolkit:1.16.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-5399

Products

Pricing

Contact Us