← Back

Powerlogic Pm5560 Firmware

powerlogic_pm5560_firmware

Vendor: Schneider Electric • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-22764
1Schneider Electric
4Powerlogic Pm5560 Firmware
Powerlogic Pm5561 FirmwarePowerlogic Pm5562 Firmware+1 more
May 29, 2026
Jun 11, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connec...Show more
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.Show less
CVE-2021-22763
1Schneider Electric
5Powerlogic Pm5560 Firmware
Powerlogic Pm5561 FirmwarePowerlogic Pm5562 Firmware+2 more
May 29, 2026
Jun 11, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation)...Show more
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.Show less
CVE-2018-7795
1Schneider Electric
1Powerlogic Pm5560 Firmware
May 29, 2026
Aug 29, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web bro...Show more
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.Show less