CVE-2021-22817 HIGH

Published: 2022-02-09 | Last Modified: 2024-11-21 | Status: Modified

Description

A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)

Additional Descriptions (1)

Una CWE-276: Se presenta una vulnerabilidad de Permisos incorrectos por Defecto que podría causar un acceso no autorizado al directorio de instalación base conllevando a una escalada de privilegios local. Producto afectado: Harmony/Magelis iPC Series (todas las versiones), Vijeo Designer (todas las versiones anteriores a V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (todas las versiones anteriores a V1.2.1)

CVSS Metrics

Base Score: 7.8 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector	LOCAL
Attack Complexity	LOW
Privileges Required	LOW
User Interaction	NONE
Scope	UNCHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 5.9

Base Score: 4.6 (MEDIUM)

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector	LOCAL
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	PARTIAL
Integrity Impact	PARTIAL
Availability Impact	PARTIAL

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 6.4

Weaknesses

Source	Type	Description
[email protected]	Secondary	en CWE-276
[email protected]	Primary	en CWE-276

Affected Products

Vendor	Product	Version	Update	Type
schneider-electric	hmibmuhi29d2801_firmware	*	<built-in method update of dict object at 0x7e6106846640>	Operating System
schneider-electric	hmibmusi29d2801_firmware	*	<built-in method update of dict object at 0x7e60bacd4e80>	Operating System
schneider-electric	hmibmuci29d2w01_firmware	*	<built-in method update of dict object at 0x7e6111c1c180>	Operating System
schneider-electric	hmibmu0i29d2001_firmware	*	<built-in method update of dict object at 0x7e6108406c40>	Operating System
schneider-electric	hmibmu0i29d200a_firmware	*	<built-in method update of dict object at 0x7e6106845340>	Operating System
schneider-electric	hmibmuhi29d4801_firmware	*	<built-in method update of dict object at 0x7e6111c1eb40>	Operating System
schneider-electric	hmibmusi29d4801_firmware	*	<built-in method update of dict object at 0x7e61109d7e80>	Operating System
schneider-electric	hmibmuci29d4w01_firmware	*	<built-in method update of dict object at 0x7e60bacd4a40>	Operating System
schneider-electric	hmibmu0i29d4001_firmware	*	<built-in method update of dict object at 0x7e61109d7800>	Operating System
schneider-electric	hmibmu0i29d400a_firmware	*	<built-in method update of dict object at 0x7e6106845040>	Operating System
schneider-electric	hmibmu0i29di00a_firmware	*	<built-in method update of dict object at 0x7e60eb26e300>	Operating System
schneider-electric	hmibmu0i29de00a_firmware	*	<built-in method update of dict object at 0x7e60bacd4e00>	Operating System
schneider-electric	hmibmphi74d2801_firmware	*	<built-in method update of dict object at 0x7e6106847b40>	Operating System
schneider-electric	hmibmpsi74d2801_firmware	*	<built-in method update of dict object at 0x7e60bacd5400>	Operating System
schneider-electric	hmibmp0i74d2001_firmware	*	<built-in method update of dict object at 0x7e6108405580>	Operating System
schneider-electric	hmibmp0i74d200a_firmware	*	<built-in method update of dict object at 0x7e61109d6400>	Operating System
schneider-electric	hmibmphi74d4801_firmware	*	<built-in method update of dict object at 0x7e6106846d00>	Operating System
schneider-electric	hmibmpsi74d4801_firmware	*	<built-in method update of dict object at 0x7e60bacd64c0>	Operating System
schneider-electric	hmibmp0i74d4001_firmware	*	<built-in method update of dict object at 0x7e61109d4ec0>	Operating System
schneider-electric	hmibmp0i74d400a_firmware	*	<built-in method update of dict object at 0x7e6111c1d300>	Operating System
schneider-electric	hmibmp0i74di00a_firmware	*	<built-in method update of dict object at 0x7e6108405d40>	Operating System
schneider-electric	hmibmp0i74de00a_firmware	*	<built-in method update of dict object at 0x7e60bacd4480>	Operating System
schneider-electric	hmibscea53d1l01_firmware	*	<built-in method update of dict object at 0x7e61109d7d00>	Operating System
schneider-electric	hmibmoma5ddf10l_firmware	*	<built-in method update of dict object at 0x7e61109d4440>	Operating System
schneider-electric	hmibmoma5dd1e01_firmware	*	<built-in method update of dict object at 0x7e6108405880>	Operating System
schneider-electric	hmibmoma5dd1101_firmware	*	<built-in method update of dict object at 0x7e60eb26e4c0>	Operating System
schneider-electric	hmibmo0a5ddf10a_firmware	*	<built-in method update of dict object at 0x7e6108407a40>	Operating System
schneider-electric	hmibmo0a5ddf101_firmware	*	<built-in method update of dict object at 0x7e6106846000>	Operating System
schneider-electric	hmibmo0a5dd1001_firmware	*	<built-in method update of dict object at 0x7e60bacd53c0>	Operating System
schneider-electric	hmibmiea5dd1e01_firmware	*	<built-in method update of dict object at 0x7e60bacd6900>	Operating System
schneider-electric	hmibmiea5dd110l_firmware	*	<built-in method update of dict object at 0x7e60bacd40c0>	Operating System
schneider-electric	hmibmiea5dd1101_firmware	*	<built-in method update of dict object at 0x7e6111c1ed00>	Operating System
schneider-electric	hmibmiea5dd100a_firmware	*	<built-in method update of dict object at 0x7e60bae0fb40>	Operating System
schneider-electric	hmibmiea5dd1001_firmware	*	<built-in method update of dict object at 0x7e60bae0dfc0>	Operating System
schneider-electric	hmibscea53d1l0t_firmware	*	<built-in method update of dict object at 0x7e6106847940>	Operating System
schneider-electric	hmibscea53d1l0a_firmware	*	<built-in method update of dict object at 0x7e60bacd6680>	Operating System
schneider-electric	vijeo_designer	*	<built-in method update of dict object at 0x7e60bae0ec80>	Application
schneider-electric	vijeo_designer	*	<built-in method update of dict object at 0x7e60bae0fec0>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e60eb227180>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e60bae0de40>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e60bacd6540>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d4100>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e60bacd7980>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d5680>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d6800>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d7780>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d6700>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d6a80>	Application
schneider-electric	vijeo_designer	6.2	<built-in method update of dict object at 0x7e61109d7700>	Application

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmuhi29d2801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmuhi29d2801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmusi29d2801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmusi29d2801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmuci29d2w01_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmuci29d2w01:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29d2001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29d2001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29d200a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29d200a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmuhi29d4801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmuhi29d4801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmusi29d4801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmusi29d4801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmuci29d4w01_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmuci29d4w01:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29d4001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29d4001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29d400a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29d400a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29di00a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29di00a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmu0i29de00a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmu0i29de00a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmphi74d2801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmphi74d2801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmpsi74d2801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmpsi74d2801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74d2001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74d2001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74d200a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74d200a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmphi74d4801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmphi74d4801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmpsi74d4801_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmpsi74d4801:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74d4001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74d4001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74d400a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74d400a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74di00a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74di00a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmp0i74de00a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmp0i74de00a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibscea53d1l01_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibscea53d1l01:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmoma5ddf10l_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmoma5ddf10l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmoma5dd1e01_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmoma5dd1e01:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmoma5dd1101_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmoma5dd1101:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmo0a5ddf10a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmo0a5ddf10a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmo0a5ddf101_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmo0a5ddf101:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmo0a5dd1001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmo0a5dd1001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmiea5dd1e01_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmiea5dd1e01:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmiea5dd110l_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmiea5dd110l:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmiea5dd1101_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmiea5dd1101:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmiea5dd100a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmiea5dd100a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibmiea5dd1001_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibmiea5dd1001:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibscea53d1l0t_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibscea53d1l0t:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:o:schneider-electric:hmibscea53d1l0a_firmware::::::::`

Operator: OR

Vulnerable	CPE
No	`cpe:2.3:h:schneider-electric:hmibscea53d1l0a:-:::::::*`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:::::basic:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:::::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:-:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp1:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp10:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp11:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp2:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp3.1:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp5.1:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp6:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp7:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp8:::-:::*`
Yes	`cpe:2.3:a:schneider-electric:vijeo_designer:6.2:sp9:::-:::*`

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-06
Source: [email protected]

Vendor Advisory
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-039-06
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory