CVE-2021-22826: A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload…

high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions

Affected

1 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	ecostruxure_power_monitoring_expert	<= 9.0	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

osv5.0MEDIUM