CVE-2021-22794

CRITICAL

StruxureWare Data Center Expert < V7.8.1 - Path Traversal

Title source: llm
STIX 2.1

Description

A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution. Affected Product: StruxureWare Data Center Expert (V7.8.1 and prior)

References (1)

Core 1
Core References

Scores

CVSS v3 9.1
EPSS 0.0373
EPSS Percentile 88.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Details

CWE
CWE-22
Status published
Products (1)
schneider-electric/struxureware_data_center_expert < 7.8.1
Published Apr 13, 2022
Tracked Since Feb 18, 2026