7.2
CVE-2021-22793
- EPSS 0.54%
- Published 02.09.2021 17:15:08
- Last modified 21.11.2024 05:50:40
- Source cybersecurity@se.com
- Teams watchlist Login
- Open Login
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.
Data is provided by the National Vulnerability Database (NVD)
Schneider-electric ≫ Accusine Pcsp Pfvp Firmware Version < 001.006.007
Schneider-electric ≫ Accusine Pcsn Active Harmonic Filter Firmware Version < 002.002.004
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.651 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.