# Vulnerabilities published in 2021 - [CVE-2021-22751](https://insights.sbomify.com/CVE-2021-22751/): Memory corruption in IGSS Definition (Def.exe) V15.0.0.21140 and prior (high 7.8) - [CVE-2021-22750](https://insights.sbomify.com/CVE-2021-22750/): Memory corruption in IGSS Definition (Def.exe) V15.0.0.21041 and prior (high 7.8) - [CVE-2021-2275](https://insights.sbomify.com/CVE-2021-2275/): Other in Applications Manager (medium 6.5) - [CVE-2021-22749](https://insights.sbomify.com/CVE-2021-22749/): Information disclosure in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior (medium 5.3) - [CVE-2021-22748](https://insights.sbomify.com/CVE-2021-22748/): Path traversal in C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) (high 8.8) - [CVE-2021-22747](https://insights.sbomify.com/CVE-2021-22747/): Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems (low 3.9) - [CVE-2021-22746](https://insights.sbomify.com/CVE-2021-22746/): Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems (low 3.9) - [CVE-2021-22745](https://insights.sbomify.com/CVE-2021-22745/): Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems (low 3.9) - [CVE-2021-22744](https://insights.sbomify.com/CVE-2021-22744/): Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems (low 3.9) - [CVE-2021-22743](https://insights.sbomify.com/CVE-2021-22743/): Denial of service in Triconex TCM 4351B installed on Tricon V11.3.x systems. (low 3.9) - [CVE-2021-22742](https://insights.sbomify.com/CVE-2021-22742/): Denial of service in Triconex Model 3009 MP installed on Tricon V11.3.x systems (low 3.9) - [CVE-2021-22741](https://insights.sbomify.com/CVE-2021-22741/): Weak cryptography in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior) (medium 6.7) - [CVE-2021-22740](https://insights.sbomify.com/CVE-2021-22740/): Information disclosure in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (medium 6.5) - [CVE-2021-2274](https://insights.sbomify.com/CVE-2021-2274/): Other in E-Business Tax (high 8.1) - [CVE-2021-22739](https://insights.sbomify.com/CVE-2021-22739/): Information disclosure in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (medium 5.9) - [CVE-2021-22738](https://insights.sbomify.com/CVE-2021-22738/): Weak cryptography in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (critical 9.8) - [CVE-2021-22737](https://insights.sbomify.com/CVE-2021-22737/): Auth bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (critical 9.8) - [CVE-2021-22736](https://insights.sbomify.com/CVE-2021-22736/): Path traversal in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (high 7.5) - [CVE-2021-22735](https://insights.sbomify.com/CVE-2021-22735/): Security feature bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (high 7.2) - [CVE-2021-22734](https://insights.sbomify.com/CVE-2021-22734/): Security feature bypass in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (high 7.2) - [CVE-2021-22733](https://insights.sbomify.com/CVE-2021-22733/): Privilege escalation in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (high 7.8) - [CVE-2021-22732](https://insights.sbomify.com/CVE-2021-22732/): Privilege escalation in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior (high 7.8) - [CVE-2021-22731](https://insights.sbomify.com/CVE-2021-22731/): Auth bypass in Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior (critical 9.8) - [CVE-2021-22730](https://insights.sbomify.com/CVE-2021-22730/): Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (critical 9.8) - [CVE-2021-2273](https://insights.sbomify.com/CVE-2021-2273/): Other in Legal Entity Configurator (high 8.1) - [CVE-2021-22729](https://insights.sbomify.com/CVE-2021-22729/): Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (critical 9.8) - [CVE-2021-22728](https://insights.sbomify.com/CVE-2021-22728/): Information disclosure in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (medium 6.5) - [CVE-2021-22727](https://insights.sbomify.com/CVE-2021-22727/): Weak cryptography in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (critical 9.8) - [CVE-2021-22726](https://insights.sbomify.com/CVE-2021-22726/): Server-side request forgery in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (high 8.1) - [CVE-2021-22725](https://insights.sbomify.com/CVE-2021-22725/): Cross-site request forgery in schneider-electric:evb1a firmware (high 8.8) - [CVE-2021-22724](https://insights.sbomify.com/CVE-2021-22724/): Cross-site request forgery in schneider-electric:evb1a firmware (high 8.8) - [CVE-2021-22723](https://insights.sbomify.com/CVE-2021-22723/): Cross-site request forgery in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (medium 6.1) - [CVE-2021-22722](https://insights.sbomify.com/CVE-2021-22722/): Cross-site scripting in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (medium 5.4) - [CVE-2021-22721](https://insights.sbomify.com/CVE-2021-22721/): Information disclosure in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (medium 5.3) - [CVE-2021-22720](https://insights.sbomify.com/CVE-2021-22720/): Path traversal in C-Bus Toolkit V1.15.7 and prior (high 7.2) - [CVE-2021-2272](https://insights.sbomify.com/CVE-2021-2272/): Other in Subledger Accounting (high 8.1) - [CVE-2021-22719](https://insights.sbomify.com/CVE-2021-22719/): Path traversal in C-Bus Toolkit V1.15.7 and prior (high 8.8) - [CVE-2021-22718](https://insights.sbomify.com/CVE-2021-22718/): Path traversal in C-Bus Toolkit V1.15.7 and prior (high 7.8) - [CVE-2021-22717](https://insights.sbomify.com/CVE-2021-22717/): Path traversal in C-Bus Toolkit V1.15.7 and prior (high 8.8) - [CVE-2021-22716](https://insights.sbomify.com/CVE-2021-22716/): Misconfiguration in C-Bus Toolkit (high 7.8) - [CVE-2021-22714](https://insights.sbomify.com/CVE-2021-22714/): Memory corruption in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0) (critical 9.8) - [CVE-2021-22713](https://insights.sbomify.com/CVE-2021-22713/): Memory corruption in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions) (high 7.5) - [CVE-2021-22712](https://insights.sbomify.com/CVE-2021-22712/): Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior (high 7.8) - [CVE-2021-22711](https://insights.sbomify.com/CVE-2021-22711/): Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior (high 7.8) - [CVE-2021-22710](https://insights.sbomify.com/CVE-2021-22710/): Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior (high 7.8) - [CVE-2021-2271](https://insights.sbomify.com/CVE-2021-2271/): Other in Work in Process (high 8.1) - [CVE-2021-22709](https://insights.sbomify.com/CVE-2021-22709/): Memory corruption in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior (high 7.8) - [CVE-2021-22708](https://insights.sbomify.com/CVE-2021-22708/): Security feature bypass in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (high 7.2) - [CVE-2021-22707](https://insights.sbomify.com/CVE-2021-22707/): Hardcoded credentials in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (critical 9.8) - [CVE-2021-22706](https://insights.sbomify.com/CVE-2021-22706/): Cross-site scripting in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (EVB1A all versions prior to R8 V3.4.0.1 ) (medium 6.1) - [CVE-2021-22705](https://insights.sbomify.com/CVE-2021-22705/): Memory corruption in Harmony HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ) or EcoStruxure Machine Expert (all versions prior to V2.0) (high 7.8) - [CVE-2021-22704](https://insights.sbomify.com/CVE-2021-22704/): Path traversal in Harmony/HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ), Vijeo Designer Basic (all versions prior to V1.2), or EcoStruxure Machine Expert (all versions prior to V2.0) (critical 9.1) - [CVE-2021-22703](https://insights.sbomify.com/CVE-2021-22703/): Information disclosure in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) (medium 5.9) - [CVE-2021-22702](https://insights.sbomify.com/CVE-2021-22702/): Information disclosure in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) (medium 5.9) - [CVE-2021-22701](https://insights.sbomify.com/CVE-2021-22701/): Cross-site request forgery in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions) (medium 6.1) - [CVE-2021-2270](https://insights.sbomify.com/CVE-2021-2270/): Other in Site Hub (high 8.1) - [CVE-2021-22699](https://insights.sbomify.com/CVE-2021-22699/): Denial of service in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 (high 7.5) - [CVE-2021-22698](https://insights.sbomify.com/CVE-2021-22698/): Memory corruption in EcoStruxure Power Build - Rapsody software V2.1.13 and prior. (high 7.8) - [CVE-2021-22697](https://insights.sbomify.com/CVE-2021-22697/): File upload in EcoStruxure Power Build - Rapsody software V2.1.13 and prior. (high 7.8) - [CVE-2021-22696](https://insights.sbomify.com/CVE-2021-22696/): OAuth 2 authorization service vulnerable to DDos attacks (high 7.5) - [CVE-2021-2269](https://insights.sbomify.com/CVE-2021-2269/): Other in Advanced Pricing (high 8.1) - [CVE-2021-22685](https://insights.sbomify.com/CVE-2021-22685/): Cassia Networks Access Controller Path Traversal (medium 6.2) - [CVE-2021-22684](https://insights.sbomify.com/CVE-2021-22684/): Integer overflow in Tizen RT RTOS (high 7.5) - [CVE-2021-22683](https://insights.sbomify.com/CVE-2021-22683/): Memory corruption in Fatek FvDesigner (high 7.8) - [CVE-2021-22682](https://insights.sbomify.com/CVE-2021-22682/): Misconfiguration in Cscape (high 7.8) - [CVE-2021-22681](https://insights.sbomify.com/CVE-2021-22681/): Rockwell Multiple Products Insufficient Protected Credentials (critical 9.8, exploited in the wild) - [CVE-2021-22680](https://insights.sbomify.com/CVE-2021-22680/): NXP MQX Integer Overflow or Wraparound (high 7.3) - [CVE-2021-2268](https://insights.sbomify.com/CVE-2021-2268/): Other in Quoting (high 8.1) - [CVE-2021-22679](https://insights.sbomify.com/CVE-2021-22679/): Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 (critical 9.8) - [CVE-2021-22678](https://insights.sbomify.com/CVE-2021-22678/): Memory corruption in Cscape (high 7.8) - [CVE-2021-22677](https://insights.sbomify.com/CVE-2021-22677/): Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 (high 7.8) - [CVE-2021-22676](https://insights.sbomify.com/CVE-2021-22676/): Cross-site scripting in WebAccess/SCADA (medium 6.1) - [CVE-2021-22675](https://insights.sbomify.com/CVE-2021-22675/): Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 (high 7.2) - [CVE-2021-22674](https://insights.sbomify.com/CVE-2021-22674/): Path traversal in WebAccess/SCADA (medium 6.5) - [CVE-2021-22673](https://insights.sbomify.com/CVE-2021-22673/): Memory corruption in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 (high 8.0) - [CVE-2021-22672](https://insights.sbomify.com/CVE-2021-22672/): Memory corruption in Delta Electronics CNCSoft ScreenEditor (high 7.8) - [CVE-2021-22671](https://insights.sbomify.com/CVE-2021-22671/): Integer overflow in SimpleLink Wi-Fi, MSP432, CC13XX, CC26XX, CC32XX, CC3100 (critical 9.8) - [CVE-2021-22670](https://insights.sbomify.com/CVE-2021-22670/): Memory corruption in Fatek FvDesigner (high 7.8) - [CVE-2021-2267](https://insights.sbomify.com/CVE-2021-2267/): Other in Labor Distribution (high 8.1) - [CVE-2021-22669](https://insights.sbomify.com/CVE-2021-22669/): Privilege escalation in Advantech WebAccess/SCADA (high 8.8) - [CVE-2021-22668](https://insights.sbomify.com/CVE-2021-22668/): Memory corruption in Delta Industrial Automation CNCSoft ScreenEditor (critical 9.8) - [CVE-2021-22667](https://insights.sbomify.com/CVE-2021-22667/): Hardcoded credentials in BB-ESWGP506-2SFP-T (critical 9.8) - [CVE-2021-22666](https://insights.sbomify.com/CVE-2021-22666/): Memory corruption in Fatek FvDesigner (high 7.8) - [CVE-2021-22665](https://insights.sbomify.com/CVE-2021-22665/): Privilege escalation in Rockwell Automation DriveTools SP and Drives AOP (high 7.8) - [CVE-2021-22664](https://insights.sbomify.com/CVE-2021-22664/): Memory corruption in Delta Electronics CNCSoft-B (high 7.8) - [CVE-2021-22663](https://insights.sbomify.com/CVE-2021-22663/): Memory corruption in Cscape (high 7.8) - [CVE-2021-22662](https://insights.sbomify.com/CVE-2021-22662/): Use after free in Fatek FvDesigner (high 7.8) - [CVE-2021-22661](https://insights.sbomify.com/CVE-2021-22661/): Auth bypass in ICX35-HWC-A, ICX35-HWC-E (high 7.5) - [CVE-2021-22660](https://insights.sbomify.com/CVE-2021-22660/): Memory corruption in Delta Electronics CNCSoft-B (high 7.8) - [CVE-2021-2266](https://insights.sbomify.com/CVE-2021-2266/): Information disclosure in VM VirtualBox (medium 6.0) - [CVE-2021-22659](https://insights.sbomify.com/CVE-2021-22659/): Memory corruption in Rockwell Automation MicroLogix 1400 (high 7.5) - [CVE-2021-22658](https://insights.sbomify.com/CVE-2021-22658/): SQL injection in Advantech iView (critical 9.8) - [CVE-2021-22657](https://insights.sbomify.com/CVE-2021-22657/): mySCADA myPRO (critical 10.0) - [CVE-2021-22656](https://insights.sbomify.com/CVE-2021-22656/): Path traversal in Advantech iView (high 7.5) - [CVE-2021-22655](https://insights.sbomify.com/CVE-2021-22655/): Memory corruption in Tellus Lite V-Simulator and V-Server Lite (high 7.8) - [CVE-2021-22654](https://insights.sbomify.com/CVE-2021-22654/): SQL injection in Advantech iView (high 7.5) - [CVE-2021-22653](https://insights.sbomify.com/CVE-2021-22653/): Memory corruption in Tellus Lite V-Simulator and V-Server Lite (high 7.8) - [CVE-2021-22652](https://insights.sbomify.com/CVE-2021-22652/): Missing authorization in Advantech iView (critical 9.8) - [CVE-2021-22651](https://insights.sbomify.com/CVE-2021-22651/): Path traversal in Luxion KeyShot Network Rendering (high 7.8) - [CVE-2021-22650](https://insights.sbomify.com/CVE-2021-22650/): Ovarro TBox Relative Path Traversal (high 7.5) --- From sbomify Insights: https://insights.sbomify.com/years/2021/page/226/