Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
🚨 CRITICAL CVE-2021-22765 (CVSS 9.8) Schneider Electric PowerLogic EGX100/EGX300 vulnerable to RCE via improper input validation. Network-accessible, no auth required. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/1No0I8AC3K
Post summary
The tweet announces the critical CVE-2021-22765 affecting Schneider Electric PowerLogic EGX100/EGX300 with an RCE vulnerability, and urges users to apply the patch immediately.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | schneider-electric | powerlogic_egx100 | - | - | - |
| OS | schneider-electric | powerlogic_egx100_firmware | - | - | - |
| HW | schneider-electric | powerlogic_egx300 | - | - | - |
| OS | schneider-electric | powerlogic_egx300_firmware | - | - | - |