CVE-2021-22827

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload

published January 28, 2022

CVSS
—
EPSS
1%
Percentile
68.0
In the wild
Unconfirmed
What it is

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01201 · 68.0th percentile
Published
2022-01-28T19:09Z
EPSS history
Timeline
  • 28 JAN 19:09Z
    A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload
    cvelistv5