Fiche vulnérabilité
CVE-2021-22763 : faille critique schneider-electric powerlogic pm5560… (CVSS 9.8)
Description
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 11 juin 2021
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- schneider-electric powerlogic pm5560 firmware
- schneider-electric powerlogic pm5561 firmware
- schneider-electric powerlogic pm5562 firmware
- schneider-electric powerlogic pm5563 firmware
- schneider-electric powerlogic pm8ecc firmware