Description (CNA)
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Satel / Satel Netco Design | affected 0 before v2.1.7; unaffected 2.1.7 |
CWE
CWE-23
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-03
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-03.json
ADP enrichment
No English description supplied.
No references supplied.