Security Advisory

CVE-2022-41670

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-04 00:00:00

Last updated 2025-04-30 20:10:42

Assigner schneider

State PUBLISHED

Description

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).

← Browse all CVEs View on cve.org ↗