1. Home
  2. CVE Database
  3. CVE-2021-22764
MEDIUM · 5.3

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could ...

Vulnerability Description

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
Schneider-ElectricPowerlogic Pm5560 Firmware< 2.7.8
Schneider-ElectricPowerlogic Pm5560-
Schneider-ElectricPowerlogic Pm5561 Firmware< 10.7.3
Schneider-ElectricPowerlogic Pm5561-
Schneider-ElectricPowerlogic Pm5562 Firmware<= 2.5.4
Schneider-ElectricPowerlogic Pm5562-
Schneider-ElectricPowerlogic Pm5563 Firmware< 2.7.8
Schneider-ElectricPowerlogic Pm5563-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2021-22764?

CVE-2021-22764 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could ...

How severe is CVE-2021-22764?

CVE-2021-22764 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22764?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic Pm5560 Firmware, Schneider-Electric Powerlogic Pm5560, Schneider-Electric Powerlogic Pm5561 Firmware, Schneider-Electric Powerlogic Pm5561, Schneider-Electric Powerlogic Pm5562 Firmware.