CVE-2021-22771

CWE-12363 documents3 sources
Severity
7.3HIGH
EPSS
0.3%
top 47.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Schneider-electric Easergy T300 Firmware
Timeline
PublishedJul 21
Latest updateMay 24

Description

A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 1.3 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5easergy_t300_with_firmware_v2.7.1_and_olderEasergy T300 with firmware V2.7.1 and older

🔴Vulnerability Details

2
GHSA
GHSA-hfw2-fvxc-ccvp: A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2↗2022-05-24
▶
CVEList
CVE-2021-22771: A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2↗2021-07-21
▶