Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22729 State: PUBLISHED Published: 2021-07-21T10:44:49 Last Updated: 2024-08-03T18:51:07.026Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-259 Description: A CWE-259: Use of Hard-coded Password vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized a
and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could allow an attacker to gain unauthorized administrative privileges when accessing to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22730 State: PUBLISHED Published: 2021-07-21T10:44:55 Last Updated: 2024-08-03T18:51:07.244Z Vendors: n/a Products: EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) Problem Types: CWE-798 Description: A CWE-798: Use of Hard-coded Credentials vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could an attacker to gain unauthorized admi
1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) that could an attacker to gain unauthorized administrative privileges when accessing to the charging station web server. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-06
CVE ID: CVE-2021-22731 State: PUBLISHED Published: 2021-05-26T19:19:23 Last Updated: 2024-08-03T18:51:06.977Z Vendors: n/a Products: Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior Problem Types: CWE-640 Description: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-01
CVE ID: CVE-2021-22732 State: PUBLISHED Published: 2021-05-26T19:19:28 Last Updated: 2024-08-03T18:51:07.036Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-269 Description: Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22733 State: PUBLISHED Published: 2021-05-26T19:19:33 Last Updated: 2024-08-03T18:51:07.124Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-269 Description: Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22734 State: PUBLISHED Published: 2021-05-26T19:19:38 Last Updated: 2024-08-03T18:51:07.351Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-347 Description: Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22735 State: PUBLISHED Published: 2021-05-26T19:19:43 Last Updated: 2024-08-03T18:51:07.376Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-347 Description: Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22736 State: PUBLISHED Published: 2021-05-26T19:19:49 Last Updated: 2024-08-03T18:51:07.007Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-22 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a denial of service when an unauthorized file is uploaded. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22737 State: PUBLISHED Published: 2021-05-26T00:00:00 Last Updated: 2024-08-03T18:51:06.979Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-307 Description: Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22738 State: PUBLISHED Published: 2021-05-26T19:19:59 Last Updated: 2024-08-03T18:51:07.092Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-327 Description: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22739 State: PUBLISHED Published: 2021-05-26T19:20:03 Last Updated: 2024-08-03T18:51:07.283Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-200 Description: Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22740 State: PUBLISHED Published: 2021-05-26T19:20:07 Last Updated: 2024-08-03T18:51:07.050Z Vendors: n/a Products: homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior Problem Types: CWE-200 Description: Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-04
CVE ID: CVE-2021-22741 State: PUBLISHED Published: 2021-05-26T19:20:13 Last Updated: 2024-08-03T18:51:07.378Z Vendors: n/a Products: ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior) Problem Types: CWE-916 Description: Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could cause the revealing of account credentials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to
ials when server database files are available. Exposure of these files to an attacker can make the system vulnerable to password decryption attacks. Note that “.sde” configuration export files do not contain user account password hashes. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-07
CVE ID: CVE-2021-22742 State: PUBLISHED Published: 2021-05-26T19:20:18 Last Updated: 2024-08-03T18:51:06.776Z Vendors: n/a Products: Triconex Model 3009 MP installed on Tricon V11.3.x systems Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
CVE ID: CVE-2021-22743 State: PUBLISHED Published: 2021-05-26T19:20:22 Last Updated: 2024-08-03T18:51:07.409Z Vendors: n/a Products: Triconex TCM 4351B installed on Tricon V11.3.x systems. Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex TCM 4351B installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
CVE ID: CVE-2021-22744 State: PUBLISHED Published: 2021-05-26T19:20:28 Last Updated: 2024-08-03T18:51:07.457Z Vendors: n/a Products: Triconex Model 3009 MP installed on Tricon V11.3.x systems Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22745, CVE-2021-22746, and CVE-2021-22747. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.c
d CVE-2021-22747. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
CVE ID: CVE-2021-22745 State: PUBLISHED Published: 2021-05-26T19:20:33 Last Updated: 2024-08-03T18:51:07.418Z Vendors: n/a Products: Triconex Model 3009 MP installed on Tricon V11.3.x systems Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22746, and CVE-2021-22747. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.c
CVE ID: CVE-2021-22746 State: PUBLISHED Published: 2021-05-26T19:20:38 Last Updated: 2024-08-03T18:51:07.103Z Vendors: n/a Products: Triconex Model 3009 MP installed on Tricon V11.3.x systems Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22747. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.c
CVE ID: CVE-2021-22747 State: PUBLISHED Published: 2021-05-26T19:20:42 Last Updated: 2024-08-03T18:51:07.339Z Vendors: n/a Products: Triconex Model 3009 MP installed on Tricon V11.3.x systems Problem Types: CWE-754 Description: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Triconex Model 3009 MP installed on Tricon V11.3.x systems that could cause module reset when TCM receives malformed TriStation packets while the write-protect keyswitch is in the program position. This CVE ID is unique from CVE-2021-22742, CVE-2021-22744, CVE-2021-22745, and CVE-2021-22746. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.c
d CVE-2021-22746. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-03
CVE ID: CVE-2021-22748 State: PUBLISHED Published: 2022-02-11T17:40:29 Last Updated: 2024-08-03T18:51:07.391Z Vendors: n/a Products: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) Problem Types: CWE-22 Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could allow a remote code execution when a file is saved. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01
CVE ID: CVE-2021-22749 State: PUBLISHED Published: 2021-06-11T15:40:45 Last Updated: 2024-08-03T18:51:07.224Z Vendors: n/a Products: Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior Problem Types: CWE-200 Description: A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD
tional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-05
CVE ID: CVE-2021-22750 State: PUBLISHED Published: 2021-06-11T15:40:45 Last Updated: 2024-08-03T18:51:07.337Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21041 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22751 State: PUBLISHED Published: 2021-06-11T15:40:45 Last Updated: 2024-08-03T18:51:07.375Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22752 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.422Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP (Workspace) file is being parsed by IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22753 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.446Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-125 Description: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22754 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.175Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22755 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.462Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-787 Description: A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22756 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.205Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-125 Description: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22757 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.382Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-125 Description: A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied input data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22758 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.417Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-824 Description: A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22759 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.426Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-416 Description: A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22760 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.176Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-763 Description: A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22761 State: PUBLISHED Published: 2021-06-11T15:40:46 Last Updated: 2024-08-03T18:51:07.174Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: CWE-119 Description: A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code e+F15xecution due to missing length check on user supplied data, when a malicious CGF file is imported to IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22762 State: PUBLISHED Published: 2021-06-11T15:40:47 Last Updated: 2024-08-03T18:51:07.350Z Vendors: n/a Products: IGSS Definition (Def.exe) V15.0.0.21140 and prior Problem Types: WE-22: Improper Limitation of a Pathname to a Restricted Directory Description: A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in remote code execution, when a malicious CGF or WSP file is being parsed by IGSS Definition. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-01
CVE ID: CVE-2021-22763 State: PUBLISHED Published: 2021-06-11T15:40:47 Last Updated: 2024-11-24T14:32:21.954Z Vendors: n/a Products: PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) Problem Types: CWE-640 Description: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?
device. Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-159-02.pdf