High severity8.0NVD Advisory· Published Jan 28, 2022· Updated Jun 17, 2026
CVE-2021-22825
CVE-2021-22825
Description
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could allow an attacker to access the system with elevated privileges when a privileged account clicks on a malicious URL that compromises the security token. Affected Products: AP7xxxx and AP8xxx with NMC2 (V6.9.6 or earlier), AP7xxx and AP8xxx with NMC3 (V1.1.0.3 or earlier), and APDU9xxx with NMC3 (V1.0.0.28 or earlier)
Affected products
5- cpe:2.3:o:schneider-electric:rack_power_distribution_unit_with_network_management_card_2_firmware:*:*:*:*:*:*:*:*Range: <7.0.6
- cpe:2.3:o:schneider-electric:rack_power_distribution_unit_with_network_management_card_3_firmware:*:*:*:*:*:*:*:*Range: <1.2.0.2
- NMC/AP7xxxx and AP8xxx NMC2/NMC3, APDU9xxx NMC3description
- Range: <=V6.9.6
- Range: <=V1.0.0.28
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdVendor Advisory
News mentions
0No linked articles in our index yet.