high8.8
CVE-2021-22826
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload.
Impact
A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22827. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Ecostruxure Power Monitoring Expert | through 9.0 |