CVE-2021-22801

2022-02-1117:40:35

CWE-269

schneider

www.cve.org

cwe-269

arbitrary command execution

specially crafted event actions

affected product

AI Score

9.8

Confidence

High

EPSS

0.011

Percentile

84.5%

JSON

A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software (All Versions)

CNA Affected

[
  {
    "product": "ConneXium Network Manager Software (All Versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ConneXium Network Manager Software (All Versions)"
      }
    ]
  }
]

References

download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-285-02