Is CVE-2021-22681 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2021-22681 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2021-22681 — Security Advisory

Minnesota's coordinated water-utility cyberattack didn't exploit a misconfiguration. It exploited a design — internet-facing PLCs with a vulnerability the vendor cannot patch.

CVSS 9.8 2021

What WebPulse reported · 1 analysis

Thirty Water Systems in 48 Hours: The Architecture Was the Attack Surface

Minnesota's coordinated water-utility cyberattack didn't exploit a misconfiguration. It exploited a design — internet-facing PLCs with a vulnerability the vendo

July 30, 2026

View CVE-2021-22681 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2021-3129