CVE-2021-22705
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
Se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los límites de un búfer de la memoria, que podría causar una denegación de servicio o acceso no autorizado a la información del sistema interactuando directamente con un controlador instalado por Vijeo Designer o EcoStruxure Machine Expert
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-06 CVE Reserved
- 2021-05-26 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-130-02 | 2022-01-31 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Gk Search vendor "Schneider-electric" for product "Harmony Gk" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Gto Search vendor "Schneider-electric" for product "Harmony Gto" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Gtu Search vendor "Schneider-electric" for product "Harmony Gtu" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Gtux Search vendor "Schneider-electric" for product "Harmony Gtux" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Sto Search vendor "Schneider-electric" for product "Harmony Sto" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Vijeo Designer Search vendor "Schneider-electric" for product "Vijeo Designer" | < 6.2.11 Search vendor "Schneider-electric" for product "Vijeo Designer" and version " < 6.2.11" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Stu Search vendor "Schneider-electric" for product "Harmony Stu" | - | - |
Safe
|
| Schneider-electric Search vendor "Schneider-electric" | Ecostruxure Machine Expert Search vendor "Schneider-electric" for product "Ecostruxure Machine Expert" | < 2.0 Search vendor "Schneider-electric" for product "Ecostruxure Machine Expert" and version " < 2.0" | - |
Affected
| in | Schneider-electric Search vendor "Schneider-electric" | Harmony Hmiscu Search vendor "Schneider-electric" for product "Harmony Hmiscu" | - | - |
Safe
|