A CWE-269: Improper Privilege Management vulnerability exists that could cause a remote code execution when the transfer command is used over the network.

A?CWE-269: Improper Privilege Management vulnerability exists?that could cause?a local privilege escalation?when the transfer command is used.

Schneider Electric's SpaceLogic C-Bus Toolkit product is vulnerable due to improper privilege management, which could cause remote code execution when the transfer command is used over the network. Schneider Electric's SpaceLogic C-Bus Toolkit product contains a path traversal vulnerability, which could cause tampering of files on the personal computer running C-Bus when using the File Command.

Schneider Electric is aware of multiple vulnerabilities in its SpaceLogic C-Bus Toolkit products. The SpaceLogic C-Bus Toolkit product is an application run on a personal computer to configure and commission C-Bus installations. Failure to apply the remediations provided below may risk remote code execution, which could result in tampering of the SpaceLogic C-Bus home automation system.