Schneider Electric C-Bus Toolkit

An attacker with workstation access could execute arbitrary code on the engineering machine, potentially allowing them to modify control system configurations, alter setpoints, or disrupt building operations. The compromise could cascade to any control systems managed by that workstation.

Energy sector operators using Schneider Electric C-Bus Toolkit for building/energy management and automation on engineering workstations. Anyone who deploys this toolkit for HVAC, lighting, or control system configuration should treat this as critical.

An attacker with network access to a workstation running C-Bus Toolkit (or a path to compromise that workstation, such as via phishing or lateral movement) could exploit the improper access control and path traversal flaws to run commands as the toolkit application. From there, they could reconfigure connected building controls or export configuration files for further attack planning.