CVE-2022-41667

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
References
Configurations

Configuration 1

cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:*:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:*:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:3.3:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:*:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:hf1:*:*:*:*:*:*
cpe:2.3:a:schneider-electric:pro-face_blue:3.3:hf1:*:*:*:*:*:*

Information

Published : 2022-11-04 12:15

Updated : 2022-11-05 02:02


NVD link : CVE-2022-41667

Mitre link : CVE-2022-41667

Products Affected
No products.
CWE