CVE-2021-22817
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized...
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
- Record
CVE-2021-22817- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-276
- Updated
- 2026-11-02
CVE List No score
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
- Record
CVE-2021-22817- Weakness
- CWE-276
- Updated
- 2026-11-02
EUVDEUVD-2021-9952 No score
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
- Record
EUVD-2021-9952- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qhqr-hrxf-m49q No score
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized...
A CWE-276: Incorrect Default Permissions vulnerability exists that could cause unauthorized access to the base installation directory leading to local privilege escalation. Affected Product: Harmony/Magelis iPC Series (All Versions), Vijeo Designer (All Versions prior to V6.2 SP11 Multiple HotFix 4), Vijeo Designer Basic (All Versions prior to V1.2.1)
- Record
GHSA-qhqr-hrxf-m49q- Weakness
- CWE-276
- Updated
- 2026-11-02
Affected products
- schneider-electric vijeo designer
- schneider-electric hmibmiea5dd1001 firmware
- schneider-electric hmibmiea5dd100a firmware
- schneider-electric hmibmiea5dd1101 firmware
- schneider-electric hmibmiea5dd110l firmware
- schneider-electric hmibmiea5dd1e01 firmware
- schneider-electric hmibmo0a5dd1001 firmware
- schneider-electric hmibmo0a5ddf101 firmware
- schneider-electric hmibmo0a5ddf10a firmware
- schneider-electric hmibmoma5dd1101 firmware
- schneider-electric hmibmoma5dd1e01 firmware
- schneider-electric hmibmoma5ddf10l firmware
Show 25 moreShow less
- schneider-electric hmibmp0i74d2001 firmware
- schneider-electric hmibmp0i74d200a firmware
- schneider-electric hmibmp0i74d4001 firmware
- schneider-electric hmibmp0i74d400a firmware
- schneider-electric hmibmp0i74de00a firmware
- schneider-electric hmibmp0i74di00a firmware
- schneider-electric hmibmphi74d2801 firmware
- schneider-electric hmibmphi74d4801 firmware
- schneider-electric hmibmpsi74d2801 firmware
- schneider-electric hmibmpsi74d4801 firmware
- schneider-electric hmibmu0i29d2001 firmware
- schneider-electric hmibmu0i29d200a firmware
- schneider-electric hmibmu0i29d4001 firmware
- schneider-electric hmibmu0i29d400a firmware
- schneider-electric hmibmu0i29de00a firmware
- schneider-electric hmibmu0i29di00a firmware
- schneider-electric hmibmuci29d2w01 firmware
- schneider-electric hmibmuci29d4w01 firmware
- schneider-electric hmibmuhi29d2801 firmware
- schneider-electric hmibmuhi29d4801 firmware
- schneider-electric hmibmusi29d2801 firmware
- schneider-electric hmibmusi29d4801 firmware
- schneider-electric hmibscea53d1l01 firmware
- schneider-electric hmibscea53d1l0a firmware
- schneider-electric hmibscea53d1l0t firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-22817 is a high vulnerability (CVSS 7.8) in Schneider-electric Vijeo Designer, published February 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.20%, the 9th percentile. No source names a fixed version.