CVE-2021-22768

CRITICAL

PowerLogic EGX100 >=3.0.0 and EGX300 - Denial of Service or Remote Code Execution via HTTP Packet

Title source: llm

Description

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03

Scores

CVSS v3 9.8

EPSS 0.0079

EPSS Percentile 74.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-20

Status published

Products (2)

schneider-electric/powerlogic_egx100_firmware 3.0.0

schneider-electric/powerlogic_egx300_firmware

Published Jun 11, 2021

Tracked Since Feb 18, 2026