Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

Published

2021-06-11T16:15:10.320

Last Modified

2024-11-24T15:15:04.450

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-640
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System schneider-electric powerlogic_pm5560_firmware < 2.7.8 Yes
Hardware schneider-electric powerlogic_pm5560 - No
Operating System schneider-electric powerlogic_pm5561_firmware < 10.7.3 Yes
Hardware schneider-electric powerlogic_pm5561 - No
Operating System schneider-electric powerlogic_pm5562_firmware ≤ 2.5.4 Yes
Hardware schneider-electric powerlogic_pm5562 - No
Operating System schneider-electric powerlogic_pm5563_firmware < 2.7.8 Yes
Hardware schneider-electric powerlogic_pm5563 - No
Operating System schneider-electric powerlogic_pm8ecc_firmware * Yes
Hardware schneider-electric powerlogic_pm8ecc - No
References