CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions

Score

CVSS 3.1 8.8 High

Status

Modified - cybersecurity@se.com

Published

2022-01-28

Last modified

2024-08-03

Weaknesses

CWE-20

Affected products

• Ecostruxure Power Monitoring Expert (Schneider-electric)

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-03