CVE-2021-22705
Published May 26, 2021
Last updated 3 years ago
Overview
- Description
- Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert
- Source
- cybersecurity@se.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 4.6
- Impact score
- 6.4
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- cybersecurity@se.com
- CWE-119
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:schneider-electric:vijeo_designer:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5F2F861-8F3B-40B0-9CC4-DB9776052C7A",
"versionEndExcluding": "6.2.11"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_gk:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FDBAEC72-A63C-464D-8E62-C42959D4A871"
},
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_gto:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3DDF1060-1FF5-41D5-A8ED-129492CC50A4"
},
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_gtu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9FCFA535-319D-4AB7-AB6C-B4BB0739B7F4"
},
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_gtux:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AEA285A2-8EA7-473D-87A5-62E970BD25C3"
},
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_sto:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "68382B8C-4FB2-49AC-8CAE-2251400BE342"
},
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_stu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EB2002BD-8A77-414F-A530-A7D9350143F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:schneider-electric:ecostruxure_machine_expert:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4DB52BF-192B-4167-872E-AAEC81ACAE7F",
"versionEndExcluding": "2.0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:schneider-electric:harmony_hmiscu:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "63E063B8-1179-48D2-A672-177AA1A0FCE1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]