Schneider Electric Powerlogic EGX300 Firmware vulnerabilities

4 CVEs affecting Schneider Electric Powerlogic EGX300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22768, published 2021-06-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-22768, published 2021-06-11. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code…
CVE-2021-22767, published 2021-06-11. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code…
CVE-2021-22765, published 2021-06-11. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service or remote code…
CVE-2021-22766, published 2021-06-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) that could cause denial of service via a specially…