NetSight
IP …
high7.8

CVE-2021-22817

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privileg…

Impact

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)

Affected products

VendorProductAffected versions
Schneider-ElectricHmibmuhi29d2801 Firmware
All versions
Schneider-ElectricHmibmusi29d2801 Firmware
All versions
Schneider-ElectricHmibmuci29d2w01 Firmware
All versions
Schneider-ElectricHmibmu0i29d2001 Firmware
All versions
Schneider-ElectricHmibmu0i29d200a Firmware
All versions
Schneider-ElectricHmibmuhi29d4801 Firmware
All versions
Schneider-ElectricHmibmusi29d4801 Firmware
All versions
Schneider-ElectricHmibmuci29d4w01 Firmware
All versions
Schneider-ElectricHmibmu0i29d4001 Firmware
All versions
Schneider-ElectricHmibmu0i29d400a Firmware
All versions
Schneider-ElectricHmibmu0i29di00a Firmware
All versions
Schneider-ElectricHmibmu0i29de00a Firmware
All versions

Weakness classification

CWE-276

References