VYPR
← All advisories
High severity7.0NVD Advisory· Published Nov 4, 2022· Updated Jun 17, 2026

CVE-2022-41667

CVE-2022-41667

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

Affected products

10
  • Schneider Electric/Ecostruxure Operator Terminal Expert5 versions
    cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:*:*:*:*:*:*:*:*range: <3.3
    • cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:schneider-electric:ecostruxure_operator_terminal_expert:3.3:hf1:*:*:*:*:*:*
    • (no CPE)range: V3.3
    • (no CPE)range: <=V3.3 Hotfix 1
  • Schneider Electric/Pro Face Blue5 versions
    cpe:2.3:a:schneider-electric:pro-face_blue:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:schneider-electric:pro-face_blue:*:*:*:*:*:*:*:*range: <3.3
    • cpe:2.3:a:schneider-electric:pro-face_blue:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:schneider-electric:pro-face_blue:3.3:hf1:*:*:*:*:*:*
    • (no CPE)range: V3.3
    • (no CPE)range: <=V3.3 Hotfix 1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.