CVE-2021-22705

HIGH

7.8

CVSS Score

Published: May 26, 2021 at 07:19 PM UTC

Updated: June 17, 2026 at 03:37 AM UTC

9 products affected across 1 vendorVijeo DesignerEcostruxure Machine ExpertHarmony Gtux

Using Harmony HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ) or EcoStruxure Machine Expert (all versions prior to V2.0) by N/A?

Get instant alerts when new vulnerabilities affect Harmony HMI Products Configured by Vijeo Designer (all versions prior to V6.2 SP11 ) or EcoStruxure Machine Expert (all versions prior to V2.0) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ecostruxure Machine Expert · Schneider Electric

95%

v < 2.0

Affected range stops below 2.0, so it looks safe — our inference, not a vendor statement

schneider-electric-harmony-hmiscu (environment)

Vijeo Designer · Schneider Electric

95%

v < 6.2.11

Affected range stops below 6.2.11, so it looks safe — our inference, not a vendor statement

schneider-electric-harmony-gk (environment) · schneider-electric-harmony-gto (environment) · schneider-electric-harmony-gtu (environment) · schneider-electric-harmony-gtux (environment) · schneider-electric-harmony-sto (environment) · schneider-electric-harmony-stu (environment)

Harmony Gk · Schneider Electricdevice

80%

All versions

Harmony Gto · Schneider Electricdevice

80%

All versions

Harmony Gtu · Schneider Electricdevice

80%

All versions

Harmony Gtux · Schneider Electricdevice

80%

All versions