CVE-2021-22763
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cybersecurity@se.com
- Published
- 2021-06-11
- Last modified
- 2026-05-29
- Weaknesses
- CWE-640
Affected products
- Powerlogic Pm5560 Firmware (Schneider-electric)
- Powerlogic Pm5561 Firmware (Schneider-electric)
- Powerlogic Pm5562 Firmware (Schneider-electric)
- Powerlogic Pm5563 Firmware (Schneider-electric)
- Powerlogic Pm8ecc Firmware (Schneider-electric)
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02&p_enDocType=Security+and+Safety+Notice&p_File_…
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02%2Chttp://download.schneider-electric.com/files?…
