CVE-2021-22817: High severity schneider electric hmibmuhi29d2801 vulnerability
Published Feb 9, 2022
·Updated
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
Affected Software
85 affected components
Schneider-electric Hmibmuhi29d2801 Firmware
Schneider-electric Hmibmuhi29d2801
Schneider-electric Hmibmusi29d2801 Firmware
Schneider-electric Hmibmusi29d2801
Schneider-electric Hmibmuci29d2w01 Firmware
Schneider-electric Hmibmuci29d2w01
Schneider-electric Hmibmu0i29d2001 Firmware
Schneider-electric Hmibmu0i29d2001
Schneider-electric Hmibmu0i29d200a Firmware
Schneider-electric Hmibmu0i29d200a
Schneider-electric Hmibmuhi29d4801 Firmware
Schneider-electric Hmibmuhi29d4801
Schneider-electric Hmibmusi29d4801 Firmware
Schneider-electric Hmibmusi29d4801
Schneider-electric Hmibmuci29d4w01 Firmware
Schneider-electric Hmibmuci29d4w01
Schneider-electric Hmibmu0i29d4001 Firmware
Schneider-electric Hmibmu0i29d4001
Schneider-electric Hmibmu0i29d400a Firmware
Schneider-electric Hmibmu0i29d400a
Schneider-electric Hmibmu0i29di00a Firmware
Schneider-electric Hmibmu0i29di00a
Schneider-electric Hmibmu0i29de00a Firmware
Schneider-electric Hmibmu0i29de00a
Schneider-electric Hmibmphi74d2801 Firmware
Schneider-electric Hmibmphi74d2801
Schneider-electric Hmibmpsi74d2801 Firmware
Schneider-electric Hmibmpsi74d2801
Schneider-electric Hmibmp0i74d2001 Firmware
Schneider-electric Hmibmp0i74d2001
Schneider-electric Hmibmp0i74d200a Firmware
Schneider-electric Hmibmp0i74d200a
Schneider-electric Hmibmphi74d4801 Firmware
Schneider-electric Hmibmphi74d4801
Schneider-electric Hmibmpsi74d4801 Firmware
Schneider-electric Hmibmpsi74d4801
Schneider-electric Hmibmp0i74d4001 Firmware
Schneider-electric Hmibmp0i74d4001
Schneider-electric Hmibmp0i74d400a Firmware
Schneider-electric Hmibmp0i74d400a
Schneider-electric Hmibmp0i74di00a Firmware
Schneider-electric Hmibmp0i74di00a
Schneider-electric Hmibmp0i74de00a Firmware
Schneider-electric Hmibmp0i74de00a
Schneider-electric Hmibscea53d1l01 Firmware
Schneider-electric Hmibscea53d1l01
Schneider-electric Hmibmoma5ddf10l Firmware
Schneider-electric Hmibmoma5ddf10l
Schneider-electric Hmibmoma5dd1e01 Firmware
Schneider-electric Hmibmoma5dd1e01
Schneider-electric Hmibmoma5dd1101 Firmware
Schneider-electric Hmibmoma5dd1101
Schneider-electric Hmibmo0a5ddf10a Firmware
Schneider-electric Hmibmo0a5ddf10a
Schneider-electric Hmibmo0a5ddf101 Firmware
Schneider-electric Hmibmo0a5ddf101
Schneider-electric Hmibmo0a5dd1001 Firmware
Schneider-electric Hmibmo0a5dd1001
Schneider-electric Hmibmiea5dd1e01 Firmware
Schneider-electric Hmibmiea5dd1e01
Schneider-electric Hmibmiea5dd110l Firmware
Schneider-electric Hmibmiea5dd110l
Schneider-electric Hmibmiea5dd1101 Firmware
Schneider-electric Hmibmiea5dd1101
Schneider-electric Hmibmiea5dd100a Firmware
Schneider-electric Hmibmiea5dd100a
Schneider-electric Hmibmiea5dd1001 Firmware
Schneider-electric Hmibmiea5dd1001
Schneider-electric Hmibscea53d1l0t Firmware
Schneider-electric Hmibscea53d1l0t
Schneider-electric Hmibscea53d1l0a Firmware
Schneider-electric Hmibscea53d1l0a
Schneider-electric Vijeo Designer<1.2.1
Schneider-electric Vijeo Designer<6.2
Schneider-electric Vijeo Designer=6.2
Schneider-electric Vijeo Designer=6.2-sp1
Schneider-electric Vijeo Designer=6.2-sp10
Schneider-electric Vijeo Designer=6.2-sp11
Schneider-electric Vijeo Designer=6.2-sp2
Schneider-electric Vijeo Designer=6.2-sp3.1
Schneider-electric Vijeo Designer=6.2-sp5.1
Schneider-electric Vijeo Designer=6.2-sp6
Schneider-electric Vijeo Designer=6.2-sp7
Schneider-electric Vijeo Designer=6.2-sp8
Schneider-electric Vijeo Designer=6.2-sp9
Event History
Feb 9, 2022
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-22817?
The severity of CVE-2021-22817 is rated as high due to its potential for local privilege escalation.
2
How do I fix CVE-2021-22817?
To fix CVE-2021-22817, update to Vijeo Designer version 6.2 SP11 Multiple HotFix 4 or later.
3
Which products are affected by CVE-2021-22817?
CVE-2021-22817 affects all versions of Harmony/Magelis iPC Series and Vijeo Designer versions prior to 6.2 SP11 Multiple HotFix 4.
4
What type of vulnerability is CVE-2021-22817?
CVE-2021-22817 is classified as a CWE-276: Incorrect Default Permissions vulnerability.
5
What are the potential impacts of CVE-2021-22817?
The potential impact of CVE-2021-22817 includes unauthorized access to the base installation directory, leading to local privilege escalation.