ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-22817

—
CVSS 3.1
7.8 high
EPSS
<1%p10
Published
()
Modified
Description

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)

Vendors
schneider-electric
Products
hmibmuhi29d2801 firmware, hmibmusi29d2801 firmware, hmibmuci29d2w01 firmware, hmibmu0i29d2001 firmware, hmibmu0i29d200a firmware, hmibmuhi29d4801 firmware, hmibmusi29d4801 firmware, hmibmuci29d4w01 firmware, hmibmu0i29d4001 firmware, hmibmu0i29d400a firmware, hmibmu0i29di00a firmware, hmibmu0i29de00a firmware
Weakness
CWE-276
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.