CVEvulnerability

CVE-2021-22763

9.8 CRITICAL Published 2021-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-640

Description

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

Affected configurations

• schneider-electric powerlogic pm5560 firmware (< 2.7.8) • schneider-electric powerlogic pm5561 firmware (< 10.7.3) • schneider-electric powerlogic pm5562 firmware (<= 2.5.4) • schneider-electric powerlogic pm5563 firmware (< 2.7.8) • schneider-electric powerlogic pm8ecc firmware

Related

Weakness · CWE (1)

  • CWE-640 Weak Password Recovery Mechanism for Forgotten Password weakness

References