Schneider-Electric Powerlogic Pm5561 Firmware vulnerabilities
2 known vulnerabilities affecting schneider-electric/powerlogic_pm5561_firmware.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2021-22763CRITICALCVSS 9.8fixed in 10.7.32021-06-11
CVE-2021-22763 [CRITICAL] CWE-640 CVE-2021-22763: A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogi
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
nvd
CVE-2021-22764MEDIUMCVSS 5.3fixed in 10.7.32021-06-11
CVE-2021-22764 [MEDIUM] CWE-287 CVE-2021-22764: A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, Pow
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.
nvd