Unscored CVE-2021-22826 EUVD-2021-9961GHSA-3jm6-hp27-2j48

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing t…

Published Jan 28, 2022 · Updated Aug 3, 2024 · Assigned by schneider

Description

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-348-03