CVE-2022-41667

Name of the Vulnerable Software and Affected Versions EcoStruxure Operator Terminal Expert versions V3.3 Hotfix 1 or prior Pro-face BLUE versions V3.3 Hotfix 1 or prior

Description The issue is related to an improper limitation of a pathname to a restricted directory, also known as a path traversal vulnerability. This allows adversaries with local user privileges to load a malicious DLL, potentially leading to the execution of malicious code.

Recommendations For EcoStruxure Operator Terminal Expert versions V3.3 Hotfix 1 or prior, update to a version later than V3.3 Hotfix 1 to resolve the issue. For Pro-face BLUE versions V3.3 Hotfix 1 or prior, update to a version later than V3.3 Hotfix 1 to resolve the issue. As a temporary workaround, consider restricting access to the affected software to minimize the risk of exploitation.