CVE:CVE-2021-22797
CNNVD:CNNVD-202109-1469
Schneider Electric EcoStruxure Control Expert（前称Unity Pro）是法国施耐德电气（Schneider Electric）公司的一套用于Schneider Electric逻辑控制器产品的编程软件。
EcoStruxure Control Expert Classic 存在路径遍历漏洞，该漏洞源于在文件操作中使用用户提供的路径之前缺乏对它的正确验证。攻击者可利用该漏洞在当前用户的环境中执行代码。
solution:Upgrade schneider-electric ecostruxure_control_expert to a higher version than 15.1,and avoid the version (,15.1); Upgrade schneider-electric ecostruxure_process_expert to a higher version than 2021,and avoid the version (,2021); Upgrade schneider-electric remoteconnect to a higher version than -