CVE-2021-22784

Summary

CVE	CVE-2021-22784
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-07-21 15:15:00 UTC
Updated	2022-01-31 19:33:00 UTC
Description	A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.

Risk And Classification

Problem Types: CWE-306

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Schneider-electric	C-bus Toolkit	All	All	All	All
Application	Se	C-bus Toolkit	All	All	All	All

References

Reference	Source	Link	Tags
Schneider Electric C-Gate Multiple Vulnerabilities - Research Advisory \| Tenable®	MISC	www.tenable.com
download.schneider-electric.com/files	MISC	download.schneider-electric.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

590497 Schneider Electric C-Bus Toolkit Missing Authentication for Critical Function Vulnerability(ICSA-21-194-01)