7.2
CVE-2021-22793
- EPSS 0.54%
- Veröffentlicht 02.09.2021 17:15:08
- Zuletzt bearbeitet 21.11.2024 05:50:40
- Quelle cybersecurity@se.com
- Teams Watchlist Login
- Unerledigt Login
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Accusine Pcsp Pfvp Firmware Version < 001.006.007
Schneider-electric ≫ Accusine Pcsn Active Harmonic Filter Firmware Version < 002.002.004
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.651 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.