Description (CNA)
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Schneider Electric / Galaxy VS | affected v6.82 |
| Schneider Electric / Galaxy VL | affected v12.21 |
CWE
CWE-22
References
ADP enrichment
No English description supplied.