CVE-2021-22769

MediumCVSS 4.3/10Last modified Jun 29, 2026

Description

A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-552

Affected software

VendorProductVersions
n/aEasergy T300 with firmware V2.7.1 and olderEasergy T300 with firmware V2.7.1 and older

References

Timeline

Published
Jun 11, 2021
Last modified
Jun 29, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-22777.5Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.CVE-2021-227706.5A CWE-200: Information Exposure vulnerability exists in Easergy T300 with firmware V2.7.1 and older that exposes sensitive information to anCVE-2021-227717.3A CWE-1236: Improper Neutralization of Formula Elements in a CSV File vulnerability exists in Easergy T300 with firmware V2.7.1 and older thCVE-2021-227729.8A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T200 ((Modbus) SC2-04MOD-07000100 and earlier), EaseCVE-2021-227736.5A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink PCVE-2021-227747.5A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1)CVE-2021-227757.8A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution witCVE-2021-227777.8A CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause code execution by opening a malicious project file.CVE-2021-227787.1Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versCVE-2021-227799.1Authentication Bypass by Spoofing vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all versionCVE-2021-22784.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 anCVE-2021-227807.1Insufficiently Protected Credentials vulnerability exists in EcoStruxure Control Expert (all versions prior to V15.0 SP1, including all vers
CVE-2021-22769: Medium severity, CVSS 4.3 | Vulnix