Vulnetix
Try Vulnetix Request Demo
CVE-2021-22763 PUBLISHED CVSS 10 CRITICAL

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

EPSS 0.27% · 50.0th percentile

Risk Scores

CVSS v2.0
10
EPSS Score
0.27%
50.0th percentile

Affected Products

VendorProductVersions
n/aPowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation)PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation)
schneider-electricpowerlogic_pm5560_firmware0
schneider-electricpowerlogic_pm5562_firmware0
schneider-electricpowerlogic_pm5561_firmware0
schneider-electricpowerlogic_pm8ecc_firmware
schneider-electricpowerlogic_pm5563_firmware0

Timeline

References

Open in Interactive Console →