{"cve":"CVE-2021-22817","nvd":{"published":"2022-02-09T23:15:14.937","modified":"2026-06-17T03:37:50.883","status":"Modified","description":"A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":["CWE-276"],"references":["https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-06","https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-06"],"products":["schneider-electric:hmibmiea5dd1001_firmware","schneider-electric:hmibmiea5dd100a_firmware","schneider-electric:hmibmiea5dd1101_firmware","schneider-electric:hmibmiea5dd110l_firmware","schneider-electric:hmibmiea5dd1e01_firmware","schneider-electric:hmibmo0a5dd1001_firmware","schneider-electric:hmibmo0a5ddf101_firmware","schneider-electric:hmibmo0a5ddf10a_firmware","schneider-electric:hmibmoma5dd1101_firmware","schneider-electric:hmibmoma5dd1e01_firmware","schneider-electric:hmibmoma5ddf10l_firmware","schneider-electric:hmibmp0i74d2001_firmware","schneider-electric:hmibmp0i74d200a_firmware","schneider-electric:hmibmp0i74d4001_firmware","schneider-electric:hmibmp0i74d400a_firmware","schneider-electric:hmibmp0i74de00a_firmware","schneider-electric:hmibmp0i74di00a_firmware","schneider-electric:hmibmphi74d2801_firmware","schneider-electric:hmibmphi74d4801_firmware","schneider-electric:hmibmpsi74d2801_firmware","schneider-electric:hmibmpsi74d4801_firmware","schneider-electric:hmibmu0i29d2001_firmware","schneider-electric:hmibmu0i29d200a_firmware","schneider-electric:hmibmu0i29d4001_firmware","schneider-electric:hmibmu0i29d400a_firmware","schneider-electric:hmibmu0i29de00a_firmware","schneider-electric:hmibmu0i29di00a_firmware","schneider-electric:hmibmuci29d2w01_firmware","schneider-electric:hmibmuci29d4w01_firmware","schneider-electric:hmibmuhi29d2801_firmware","schneider-electric:hmibmuhi29d4801_firmware","schneider-electric:hmibmusi29d2801_firmware","schneider-electric:hmibmusi29d4801_firmware","schneider-electric:hmibscea53d1l01_firmware","schneider-electric:hmibscea53d1l0a_firmware","schneider-electric:hmibscea53d1l0t_firmware","schneider-electric:vijeo_designer"],"source":"nvd","synced_at":"2026-10-19T21:28:04.509275555+00:00"},"epss":{"cve":"CVE-2021-22817","score":0.002,"percentile":0.0985,"date":"2026-11-01"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}