CVEvulnerability

CVE-2021-22817

7.8 HIGH Published 2022-02-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-02-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-276

Description

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)

Affected configurations

• schneider-electric hmibmuhi29d2801 firmware • schneider-electric hmibmusi29d2801 firmware • schneider-electric hmibmuci29d2w01 firmware • schneider-electric hmibmu0i29d2001 firmware • schneider-electric hmibmu0i29d200a firmware • schneider-electric hmibmuhi29d4801 firmware • schneider-electric hmibmusi29d4801 firmware • schneider-electric hmibmuci29d4w01 firmware • schneider-electric hmibmu0i29d4001 firmware • schneider-electric hmibmu0i29d400a firmware • schneider-electric hmibmu0i29di00a firmware • schneider-electric hmibmu0i29de00a firmware • schneider-electric hmibmphi74d2801 firmware • schneider-electric hmibmpsi74d2801 firmware • schneider-electric hmibmp0i74d2001 firmware • schneider-electric hmibmp0i74d200a firmware • schneider-electric hmibmphi74d4801 firmware • schneider-electric hmibmpsi74d4801 firmware • schneider-electric hmibmp0i74d4001 firmware • schneider-electric hmibmp0i74d400a firmware • schneider-electric hmibmp0i74di00a firmware • schneider-electric hmibmp0i74de00a firmware • schneider-electric hmibscea53d1l01 firmware • schneider-electric hmibmoma5ddf10l firmware • schneider-electric hmibmoma5dd1e01 firmware • schneider-electric hmibmoma5dd1101 firmware • schneider-electric hmibmo0a5ddf10a firmware • schneider-electric hmibmo0a5ddf101 firmware • schneider-electric hmibmo0a5dd1001 firmware • schneider-electric hmibmiea5dd1e01 firmware • schneider-electric hmibmiea5dd110l firmware • schneider-electric hmibmiea5dd1101 firmware • schneider-electric hmibmiea5dd100a firmware • schneider-electric hmibmiea5dd1001 firmware • schneider-electric hmibscea53d1l0t firmware • schneider-electric hmibscea53d1l0a firmware • schneider-electric vijeo designer (< 1.2.1) • schneider-electric vijeo designer (< 6.2) • schneider-electric vijeo designer 6.2

Related

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References