What’s Vulnerable › Vulnerabilities

CVE-2021-22793

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-02 · updated 2026-06-17
• Weakness: CWE-200

Description

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exist in AccuSine PCS+ / PFV+ (Versions prior to V1.6.7) and AccuSine PCSn (Versions prior to V2.2.4) that could allow an authenticated attacker to access the device via FTP protocol.

Affected products

• Schneider-Electric Accusine Pcsn Active Harmonic Filter Firmware: before 002.002.004 — fixed in 002.002.004
• Schneider-Electric Accusine Pcsp Pfvp Firmware: before 001.006.007 — fixed in 001.006.007

How to fix

Upgrade to a fixed version: Schneider-Electric Accusine Pcsn Active Harmonic Filter Firmware 002.002.004; Schneider-Electric Accusine Pcsp Pfvp Firmware 001.006.007. Check the vendor advisory for mitigations.

References

• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-01
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-05
• https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-222-01

Get alerted when CVE-2021-22793 or the next vulnerability affects your stack