PT-2021-15207 · Schneider Electric · Easergy T300

Published 2021-06-11 · Updated 2021-09-20 · CVE-2021-22769

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Easergy T300 versions V2.7.1 and older

Description A vulnerability exists that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.

Recommendations For Easergy T300 versions V2.7.1 and older, restrict access to sensitive files and directories to minimize the risk of exploitation.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2021-22769

Affected Products

Easergy T300

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-22769 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22769 · Vendor Advisory
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02 · Vendor Advisory