Vulnerability Details CVE-2021-22763
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
References
Products affected by CVE-2021-22763
-
cpe:2.3:h:schneider-electric:powerlogic_pm5560:-
-
cpe:2.3:h:schneider-electric:powerlogic_pm5561:-
-
cpe:2.3:h:schneider-electric:powerlogic_pm5562:-
-
cpe:2.3:h:schneider-electric:powerlogic_pm5563:-
-
cpe:2.3:h:schneider-electric:powerlogic_pm8ecc:-
-
cpe:2.3:o:schneider-electric:powerlogic_pm5560_firmware:-
-
cpe:2.3:o:schneider-electric:powerlogic_pm5560_firmware:1.0
-
cpe:2.3:o:schneider-electric:powerlogic_pm5561_firmware:-
-
cpe:2.3:o:schneider-electric:powerlogic_pm5562_firmware:-
-
cpe:2.3:o:schneider-electric:powerlogic_pm5562_firmware:2.5.4
-
cpe:2.3:o:schneider-electric:powerlogic_pm5563_firmware:-
-
cpe:2.3:o:schneider-electric:powerlogic_pm8ecc_firmware:2.60