High severity8.8NVD Advisory· Published Apr 13, 2021· Updated Jun 17, 2026
CVE-2021-22717
CVE-2021-22717
Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*range: <=1.15.7
- (no CPE)range: <=V1.15.7
- C-Bus Toolkit/C-Bus Toolkitdescription
- Range: <=V1.15.7
Patches
Vulnerability mechanics
References
2- download.schneider-electric.com/filesnvdVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-21-447/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.