1. Home
  2. CVE Database
  3. CVE-2021-22763
CRITICAL · 9.8

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for ...

Vulnerability Description

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Schneider-ElectricPowerlogic Pm5560 Firmware< 2.7.8
Schneider-ElectricPowerlogic Pm5560-
Schneider-ElectricPowerlogic Pm5561 Firmware< 10.7.3
Schneider-ElectricPowerlogic Pm5561-
Schneider-ElectricPowerlogic Pm5562 Firmware<= 2.5.4
Schneider-ElectricPowerlogic Pm5562-
Schneider-ElectricPowerlogic Pm5563 Firmware< 2.7.8
Schneider-ElectricPowerlogic Pm5563-
Schneider-ElectricPowerlogic Pm8Ecc FirmwareAll versions
Schneider-ElectricPowerlogic Pm8Ecc-

Related Weaknesses (CWE)

CWE-640

References

FAQ

What is CVE-2021-22763?

CVE-2021-22763 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for ...

How severe is CVE-2021-22763?

CVE-2021-22763 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2021-22763?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic Pm5560 Firmware, Schneider-Electric Powerlogic Pm5560, Schneider-Electric Powerlogic Pm5561 Firmware, Schneider-Electric Powerlogic Pm5561, Schneider-Electric Powerlogic Pm5562 Firmware.