CVE-2021-22767: Schneider Electric Powerlogic EGX100 Firmware

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276

Affected products

• Schneider Electric Powerlogic EGX100 Firmware: from 3.0.0
• Schneider Electric Powerlogic EGX300 Firmware: any version

Published 2021-06-11. Last modified 2026-06-17.