CVE-2021-22765

CRITICAL

PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service or Remote Code Execution via HTTP Packet

Title source: llm
STIX 2.1

Description

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0061
EPSS Percentile 69.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
schneider-electric/powerlogic_egx100_firmware 3.0.0
schneider-electric/powerlogic_egx300_firmware
Published Jun 11, 2021
Tracked Since Feb 18, 2026