Schneider-Electric Powerlogic Pm5560 Firmware vulnerabilities
3 known vulnerabilities affecting schneider-electric/powerlogic_pm5560_firmware.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2021-22763CRITICALCVSS 9.8fixed in 2.7.82021-06-11
CVE-2021-22763 [CRITICAL] CWE-640 CVE-2021-22763: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogi
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
nvd
CVE-2021-22764MEDIUMCVSS 5.3fixed in 2.7.82021-06-11
CVE-2021-22764 [MEDIUM] CWE-287 CVE-2021-22764: A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, Pow
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.
nvd
CVE-2018-7795MEDIUMCVSS 6.1fixed in 2.5.42018-08-29
CVE-2018-7795 [MEDIUM] CWE-79 CVE-2018-7795: A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to
A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.
nvd