NetSight
IP …
critical9.8

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLog…

Impact

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

Affected products

VendorProductAffected versions
Schneider-ElectricPowerlogic Pm5560 Firmware
before 2.7.8
Schneider-ElectricPowerlogic Pm5561 Firmware
before 10.7.3
Schneider-ElectricPowerlogic Pm5562 Firmware
through 2.5.4
Schneider-ElectricPowerlogic Pm5563 Firmware
before 2.7.8
Schneider-ElectricPowerlogic Pm8ecc Firmware
All versions

Weakness classification

CWE-640

References