CVE-2021-22765 PUBLISHED CVSS 7.5 HIGH

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet

EPSS 0.61% · 69.6th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
0.61%
69.6th percentile

Affected Products

VendorProductVersions
n/aPowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions)PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions)
schneider-electricpowerlogic_egx300_firmware
schneider-electricpowerlogic_egx100_firmware3.0.0

Timeline

References

Open in Interactive Console →