Security Advisory

CVE-2021-43555

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-19 18:16:13
Last updated 2024-09-17 02:41:16
Assigner icscert
State PUBLISHED

Description

mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulnerable to a path traversal payload. This vulnerability may allow an attacker to plant files on the file system in arbitrary locations or overwrite existing files, resulting in remote code execution.