What’s Vulnerable › Vulnerabilities

CVE-2021-22772

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-21 · updated 2026-06-17
• Weakness: CWE-306

Description

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), Easergy T200 ((IEC104) SC2-04IEC-07000100 and earlier), and Easergy T200 ((DNP3) SC2-04DNP-07000102 and earlier) that could cause unauthorized operation when authentication is bypassed.

Affected products

• Schneider-Electric T200E Firmware: through sc2-04mod-07000100; through sc2-04iec-07000100; through sc2-04dnp-07000102
• Schneider-Electric T200I Firmware: through sc2-04mod-07000100; through sc2-04iec-07000100; through sc2-04dnp-07000102
• Schneider-Electric T200P Firmware: through sc2-04mod-07000100; through sc2-04iec-07000100; through sc2-04dnp-07000102

References

• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-05
• http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-05

Get alerted when CVE-2021-22772 or the next vulnerability affects your stack