CVE-2021-22769
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
A CWE-552 vulnerability in Easergy T300 firmware versions V2.7.1 and older allows unauthorized attackers to access system files and directories. Lack of proper access restrictions can lead to exposure of sensitive data.
Risk Assessment
The organization is at risk of leaking sensitive information such as device configurations or operational data, which could enable further attacks or compromise system integrity.
Recommendation
Immediately update Easergy T300 firmware to a version newer than V2.7.1 that includes a fix restricting file and directory access.
Original NVD description (English source)
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted.