CVE-2021-22777: Schneider Electric Sosafe Configurable

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.

Affected products

• Schneider Electric Sosafe Configurable: before 1.8.1 (fixed in 1.8.1)

Published 2021-07-21. Last modified 2026-06-17.