PT-2021-15209 · Schneider Electric · Easergy T300

Published 2021-07-21 · Updated 2021-07-28 · CVE-2021-22771

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easergy T300 versions V2.7.1 and older

Description A vulnerability exists that allows arbitrary command execution due to improper neutralization of formula elements in a CSV file.

Recommendations For Easergy T300 versions V2.7.1 and older, update to a version newer than V2.7.1 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2021-22771

Affected Products

Easergy T300

References · 3

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22771 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22771 · Vendor Advisory