Detections
Analytics

Schneider Electric C-Gate < 2.11.6 Multiple Vulnerabilities

high Nessus Plugin ID 149971

Language:

Synopsis

A C-Bus control and monitoring application is affected by multiple vulnerabilities.

Description

The Schneider Electric C-Gate running on the remote host is affected by multiple vulnerabilities :

 - A path traversal vulnerability exists within the processing of commands sent to the C-Gate server. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An authenticated, remote attacker can leverage this vulnerability to execute code in the context of SYSTEM. (CVE-2021-22717)

 - A path traversal vulnerability exists within the processing of commands sent to the C-Gate server. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An authenticated, remote attacker can leverage this vulnerability to execute code in the context of SYSTEM. (CVE-2021-22719)

 - A path traversal vulnerability exists within the processing of commands sent to the C-Gate server. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An authenticated, remote attacker can leverage this vulnerability to disclose information in the context of SYSTEM. (CVE-2021-22720)

Note that Nessus has not tested for the issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade C-Gate to version 2.11.6 or later.

See Also

http://www.nessus.org/u?f25c523f

https://us-cert.cisa.gov/ics/advisories/icsa-21-105-01

Plugin Details

Severity: High

ID: 149971

File Name: schneider_electric_cgate_icsa-21-105-01.nbin

Version: 1.45

Type: remote

Family: SCADA

Published: 5/26/2021

Updated: 4/15/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2021-22720

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2021-22719

Vulnerability Information

CPE: x-cpe:/a:schneider-electric:c-gate

Required KB Items: Services/schneider_electric_cgate

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/8/2021

Vulnerability Publication Date: 4/13/2021

Reference Information

CVE: CVE-2021-22717, CVE-2021-22719, CVE-2021-22720

ICSA: 21-105-01

ZDI: ZDI-21-447, ZDI-21-449, ZDI-21-450