CVE-2021-22772CWE-306

CVE-2021-22772: vulnerability in Easergy T200 ((Modbus) SC2-04MOD-07000100 and…

Published · Updated

Follow this CVE+ Monitor Easergy T200 SC2-04MOD-07000100 and earlier), Easergy T200 SC2-04IEC-07000100 and earlier), and Easergy T200 SC2-04DNP-07000102 and earlier)

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%
A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), Easergy T200 ((IEC104) SC2-04IEC-07000100 and earlier), and Easergy T200 ((DNP3) SC2-04DNP-07000102 and earlier) that could cause unauthorized operation when authentication is bypassed.
Affected products
n/a · Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), Easergy T200 ((IEC104) SC2-04IEC-07000100 and earlier), and Easergy T200 ((DNP3) SC2-04DNP-07000102 and earlier)