Schneider-Electric Powerlogic Egx100 Firmware vulnerabilities

4 known vulnerabilities affecting schneider-electric/powerlogic_egx100_firmware.

Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-22768CRITICALCVSS 9.8≥ 3.0.02021-06-11
CVE-2021-22768 [CRITICAL] CVE-2021-22768: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and ne A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767
nvd
CVE-2021-22765CRITICALCVSS 9.8≥ 3.0.02021-06-11
CVE-2021-22765 [CRITICAL] CWE-20 CVE-2021-22765: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and ne A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet
nvd
CVE-2021-22767CRITICALCVSS 9.8≥ 3.0.02021-06-11
CVE-2021-22767 [CRITICAL] CWE-20 CVE-2021-22767: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and ne A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276
nvd
CVE-2021-22766HIGHCVSS 7.5≥ 3.0.02021-06-11
CVE-2021-22766 [HIGH] CWE-20 CVE-2021-22766: A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and ne A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet
nvd