CVE-2021-22701

🗓️ 19 Feb 2021 15:15:16Reported by schneiderType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 66 Views

PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 CWE-35

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-22701	19 Feb 202118:51	–	circl
CNNVD	Schneider PowerLogic 产品跨站请求伪造漏洞	19 Feb 202100:00	–	cnnvd
CNVD	F5 BIG-IP Buffer Overflow Vulnerability (CNVD-2021-13226)	21 Feb 202100:00	–	cnvd
Cvelist	CVE-2021-22701	19 Feb 202115:15	–	cvelist
EUVD	EUVD-2021-9836	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Schneider Electric equipment	11 Feb 202100:00	–	ncsc
NVD	CVE-2021-22701	19 Feb 202116:15	–	nvd
Prion	Cross site request forgery (csrf)	19 Feb 202116:15	–	prion
Positive Technologies	PT-2021-3888	9 Feb 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-22701	9 Jan 202611:21	–	redhatcve

NVD

Node

schneider-electric powerlogic_ion7400_firmwareRange<3.0.0

AND

schneider-electric powerlogic_ion7400Match-

schneider-electric powerlogic_ion7410Match-

Node

schneider-electric powerlogic_ion7650_firmware

AND

schneider-electric powerlogic_ion7650Match-

Node

schneider-electric powerlogic_ion8600_firmware

AND

schneider-electric powerlogic_ion8600Match-

Node

schneider-electric powerlogic_ion8650_firmwareRange≤4.31.2

AND

schneider-electric powerlogic_ion8650Match-

Node

schneider-electric powerlogic_ion8800_firmware

AND

schneider-electric powerlogic_ion8800Match-

Node

schneider-electric powerlogic_ion9000_firmwareRange<3.0.0

AND

schneider-electric powerlogic_ion9000Match-

Node

schneider-electric powerlogic_pm8000_firmwareRange<3.0.0

AND

schneider-electric powerlogic_pm8000Match-

Node

schneider-electric powerlogic_ion8300_firmware

AND

schneider-electric powerlogic_ion8300Match-

Node

schneider-electric powerlogic_ion8400_firmware

AND

schneider-electric powerlogic_ion8400Match-

Node

schneider-electric powerlogic_ion8500_firmware

AND

schneider-electric powerlogic_ion8500Match-

[
  {
    "product": "PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "EcoStruxure™ Operator Terminal Expert 3.1 Service Pack 1A and prior running on Harmony HMIs HMIST6 Series, HMIG3U in HMIGTU Series, HMISTO Series and Pro-face BLUE 3.1 Service Pack 1A and prior running on Pro-face HMIs: ST6000 Series, SP-5B41 in SP5000 Series, GP4100 Series"
      }
    ]
  }
]

Source	Link
se	www.se.com/ww/en/download/document/SEVD-2021-040-01/

29 May 2026 14:16Current

4.7Medium risk

Vulners AI Score4.7

CVSS 23.5

CVSS 3.14.5 - 6.1

EPSS0.00156

CWE-352