CVE-2021-22771

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-07-21 · updated 2026-06-17
Weakness: CWE-1236

Description

A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older that would allow arbitrary command execution.

Affected products

Easergy T300 (Firmware version 1.5.2 and older): through 2.7.1

References

http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-02

Get alerted when CVE-2021-22771 or the next vulnerability affects your stack