CVE-2021-22763
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
Affected (5)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.7.8 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Powerlogic Pm5560 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 10.7.3 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Powerlogic Pm5561 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.5.4 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Powerlogic Pm5562 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 2.7.8 |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Powerlogic Pm5563 | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Schneider Electric Powerlogic Pm8ecc | All versions |
References (2)
Source: cybersecurity@se.com
Source: af854a3a-2127-422b-91ae-364da2661108
Timeline
No history available yet.