CVE-2021-22793

HIGH

AccuSine PCS+/PFV+ <1.6.7, AccuSine PCSn <2.2.4 - Info Disclosure

Title source: llm

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.

References (2)

Core 2

Core References

Not Applicable x_refsource_misc

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-01

Patch, Vendor Advisory

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-05

Scores

CVSS v3 7.2

EPSS 0.0054

EPSS Percentile 68.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-200

Status published

Products (2)

schneider-electric/accusine_pcsn_active_harmonic_filter_firmware < 002.002.004

schneider-electric/accusine_pcsp_pfvp_firmware < 001.006.007

Published Sep 02, 2021

Tracked Since Feb 18, 2026