HTTP: Schneider Electric IGSS getRMSreportFile Directory Traversal
This signature detects attempts to exploit a known vulnerability against Schneider Electric. A successful attack can lead to directory traversal and arbitrary code execution.
Extended Description
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Affected Products
Schneider-electric custom_reports
References
CVE: CVE-2023-27981
Short Name
HTTP:DIR:SCHNEIDER-IGSS
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2023-27981 Directory Electric IGSS Schneider Traversal getRMSreportFile
Release Date
09/11/2023
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3731
False Positive
Unknown
Vendors
Schneider-electric