CVE-2021-22826 is a vulnerability in Schneider Electric Ecostruxure Power Monitoring Expert
Published on January 28, 2022
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure? Power Monitoring Expert 9.0 and prior versions
Products Associated with CVE-2021-22826
Want to know whenever a new CVE is published for Schneider Electric Ecostruxure Power Monitoring Expert? stack.watch will email you.
Exploit Probability
EPSS
0.72%
Percentile
72.25%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.