What’s Vulnerable › Vulnerabilities

CVE-2021-22768

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-06-11 · updated 2026-06-17
• Weakness: CWE-20

Description

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767

Affected products

• Schneider-Electric Powerlogic Egx100 Firmware: from 3.0.0
• Schneider-Electric Powerlogic Egx300 Firmware: all versions

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03

Get alerted when CVE-2021-22768 or the next vulnerability affects your stack