cve.bz

CVE-2021-22799

3.8 lowEPSS 0.2%

Low (3.8) in schneider-electric software update. EPSS 0.2% chance of exploitation in the next 30 days.

A CWE-331: Insufficient Entropy vulnerability exists that could cause unintended connection from an internal network to an external network when an attacker manages to decrypt the SESU proxy password from the registry. Affected Product: Schneider Electric Software Update, V2.3.0 through V2.5.1

Severity

CVSS 3.1

3.8 low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE
CWE-331
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON