CVE-2021-22784medium
Description
A CWE-306: Missing Authentication for Critical Function vulnerability exists in C-Bus Toolkit v1.15.8 and prior that could allow an attacker to use a crafted webpage to obtain remote access to the system.
References
http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-194-04
Details
Source: MITRE
Published: 2021-07-21
Updated: 2021-11-30
Type: CWE-306
Risk Information
CVSS v2
Base Score: 3.5
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Impact Score: 2.9
Exploitability Score: 6.8
Severity: LOW
CVSS v3
Base Score: 5.7
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
Impact Score: 3.6
Exploitability Score: 2.1
Severity: MEDIUM