A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
History
21 Nov 2024, 05:50
Type | Values Removed | Values Added |
---|---|---|
References | () http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02%2Chttp://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03 - |
07 Nov 2023, 03:30
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-06-11 16:15
Updated : 2024-11-21 05:50
NVD link : CVE-2021-22764
Mitre link : CVE-2021-22764
CVE.ORG link : CVE-2021-22764
JSON object : View
Products Affected
schneider-electric
- powerlogic_pm5560
- powerlogic_pm5561
- powerlogic_pm5561_firmware
- powerlogic_pm5560_firmware
- powerlogic_pm5562
- powerlogic_pm5562_firmware
- powerlogic_pm5563_firmware
- powerlogic_pm5563
CWE
CWE-287
Improper Authentication