7.8
CVE-2021-22817
- EPSS 0.2%
- Veröffentlicht 09.02.2022 23:15:14
- Zuletzt bearbeitet 21.11.2024 05:50:43
- Erkennungen
LoginA CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Schneider-electric ≫ Vijeo Designer SwEdition basic Version < 1.2.1
Schneider-electric ≫ Vijeo Designer SwEdition - Version < 6.2
Schneider-electric ≫ Vijeo Designer Version 6.2 Update - SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp1 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp10 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp11 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp2 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp3.1 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp5.1 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp6 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp7 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp8 SwEdition -
Schneider-electric ≫ Vijeo Designer Version 6.2 Update sp9 SwEdition -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.2% | 0.1 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-06