CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-22763
Critical (9.8) in schneider-electric. EPSS 1.9% chance of exploitation in the next 30 days.
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
Severity
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-640
- Published
- Modified
- Record from
- the NVD, synced
Affected
- schneider-electric:powerlogic_pm5560_firmware
- schneider-electric:powerlogic_pm5561_firmware
- schneider-electric:powerlogic_pm5562_firmware
- schneider-electric:powerlogic_pm5563_firmware
- schneider-electric:powerlogic_pm8ecc_firmware