CVE-2021-22704

🗓️ 02 Sep 2021 16:53:31Reported by schneiderType

CVE-2021-22704 CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability in Harmony/HMI Products

Reporter	Title	Published	Views	Family All 6
CNNVD	多款 Schneider Electric 产品路径遍历漏洞	2 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-22704	2 Sep 202116:53	–	cvelist
EUVD	EUVD-2021-9839	3 Oct 202520:07	–	euvd
NVD	CVE-2021-22704	2 Sep 202117:15	–	nvd
Prion	Design/Logic Flaw	2 Sep 202117:15	–	prion
RedhatCVE	CVE-2021-22704	22 May 202520:47	–	redhatcve

NVD

Node

schneider-electric vijeo_designerRange<6.2.11

AND

schneider-electric harmony_gkMatch-

schneider-electric harmony_gtoMatch-

schneider-electric harmony_gtuMatch-

schneider-electric harmony_gtuxMatch-

schneider-electric harmony_stoMatch-

schneider-electric harmony_stuMatch-

Node

schneider-electric vijeo_designerRange<1.2basic

AND

schneider-electric harmony_gxuMatch-

Node

schneider-electric ecostruxure_machine_expertRange<2.0

schneider-electric ecostruxure_machine_expertMatch2.0

AND

schneider-electric harmony_scuMatch-

[
  {
    "product": "Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0)"
      }
    ]
  }
]

Source	Link
download	www.download.schneider-electric.com/files

21 Nov 2024 05:50Current

8.7High risk

Vulners AI Score8.7

CVSS 26.4

CVSS 3.19.1

EPSS0.00601

CWE-22