ZDI-23-1796: Schneider Electric C-Bus Toolkit FileCommand Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Schneider Electric C-Bus Toolkit. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2023-5399.

arbitrary code attackers authentication bus code code execution cve cves cvss directory directory traversal electric exploit rating remote code remote code execution schneider schneider electric toolkit vulnerability zdi