VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 11, 2021· Updated Jun 17, 2026

CVE-2021-22768

CVE-2021-22768

Description

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767

Affected products

4
  • Schneider Electric/PowerLogic EGX1002 versions
    cpe:2.3:o:schneider-electric:powerlogic_egx100_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:powerlogic_egx100_firmware:*:*:*:*:*:*:*:*range: >=3.0.0
    • (no CPE)range: >=3.0.0
  • Schneider Electric/PowerLogic EGX3002 versions
    cpe:2.3:o:schneider-electric:powerlogic_egx300_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:schneider-electric:powerlogic_egx300_firmware:*:*:*:*:*:*:*:*
    • (no CPE)range: All Versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.