CVE-2021-22766

HIGH

PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service via Crafted HTTP Packet

Title source: llm

Description

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially crafted HTTP packet

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03

Scores

CVSS v3 7.5

EPSS 0.0088

EPSS Percentile 75.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (2)

schneider-electric/powerlogic_egx100_firmware 3.0.0

schneider-electric/powerlogic_egx300_firmware

Published Jun 11, 2021

Tracked Since Feb 18, 2026