CVE-2021-22803

CRITICAL 9.8CVE-2021-22803 · Published 11/02/2022 · updated 17/06/2026

In short

CVE-2021-22803 is a CRITICAL (CVSS 9.8) vulnerability affecting interactive graphical scada system data collector (schneider-electric).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
interactive graphical scada system data collector schneider-electric	`≤ 15.0.0.21243`	No fix yet

Description

A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could lead to remote code execution through a number of paths, when an attacker, writes arbitrary files to folders in context of the DC module, by sending constructed messages on the network. Affected Product: Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior)

References

download.schneider-electric.com/files · Patch

More vulnerabilities in interactive graphical scada system data collector

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2021-22803 is a CRITICAL (CVSS 9.8) vulnerability affecting interactive graphical scada system data collector (schneider-electric).

Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 80.1% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

interactive graphical scada system data collector

schneider-electric

≤ 15.0.0.21243

No fix yet

Description

More vulnerabilities in interactive graphical scada system data collector

See all →