Vulnerability · Published Jul 21, 2021 · Assigned by schneider
CVE-2021-22784
Medium 5.7
In plain English
A medium-severity missing authentication in C-Bus Toolkit v1.15.8 and prior. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 12.1% (higher than 96% of all known vulnerabilities).
Severity (CVSS NVD)5.7Medium
Exploit odds (30 days)12.1%top 3.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | C-Bus Toolkit v1.15.8 and prior | C-Bus Toolkit v1.15.8 and prior |
Weakness: CWE-306
References
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-04 x_refsource_MISC
- https://www.tenable.com/security/research/tra-2021-50 x_refsource_MISC