CVE:CVE-2021-22772
CNNVD:CNNVD-202107-1576
Schneider-electric Schneider Electric Easergy T200是法国施耐德（Schneider-electric）公司的中压/低压变电站的远程控制终端。
多款 Schneider Electric 产品中存在访问控制错误漏洞，该漏洞源于产品的缺少有效的授权操作，以下产品及版本受到影响：Easergy T200 ((Modbus) SC2-04MOD-07000100及之前版本)、Easergy T200 ((IEC104) SC2-04IEC-07000100及之前版本)、Easergy T200 ((DNP3) SC2-04DNP-07000102及之前版本)。
solution:Upgrade schneider-electric t200i_firmware to a higher version than sc2-04mod-07000100,sc2-04iec-07000100,sc2-04dnp-07000102,and avoid the version (,sc2-04mod-07000100],(,sc2-04iec-07000100],(,sc2-04dnp-07000102]; Upgrade schneider-electric t200e_firmware to a higher version than sc2-04mod-07000100,sc2-04iec-07000100,sc2-04dnp-07000102,and avoid the version (,sc2-04mod-07000100],(,sc2-04iec-07000100],(,sc2-04dnp-07000102]; Upgrade schneider-electric t200p_firmware to a higher version than sc2-04mod-07000100,sc2-04iec-07000100,sc2-04dnp-07000102,and avoid the version (,sc2-04mod-07000100],(,sc2-04iec-07000100],(,sc2-04dnp-07000102]