CVE-2021-22827: Schneider Electric Ecostruxure Power Monitoring Expert

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A CWE-20: Improper Input Validation vulnerability exists that could cause arbitrary code execution when the user visits a page containing the injected payload. This CVE is unique from CVE-2021-22826. Affected Product: EcoStruxure� Power Monitoring Expert 9.0 and prior versions

Affected products

• Schneider Electric Ecostruxure Power Monitoring Expert: up to and including 9.0

Published 2022-01-28. Last modified 2026-06-17.