What is CVE-2021-22769?

CVE-2021-22769 is a medium-severity vulnerability in Schneider-Electric Easergy T300, classified under Files or Directories Accessible to External Parties. CVSS score: 4.3/10. Published 2021-06-11.

How severe is CVE-2021-22769?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Vulnerability in Schneider-Electric Easergy T300

CVE-2021-22769

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.

EPSS: 0.006 (47.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Schneider-electric Easergy_t300
Schneider-electric Easergy_t300_firmware
N/a Easergy T300 With Firmware V2.7.1 And Older — versions Easergy T300 with firmware V2.7.1 and older

Weakness classification (CWE)

CWE-552 — Files or Directories Accessible to External Parties

References

cybersecurity@se.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22769?: CVE-2021-22769 is a medium-severity vulnerability in Schneider-Electric Easergy T300, classified under Files or Directories Accessible to External Parties. CVSS score: 4.3/10. Published 2021-06-11.
How severe is CVE-2021-22769?: Medium severity. CVSS v3 base score is 4.3 out of 10.