CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

CVE-2021-22766

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

CVE-2021-22766

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22764

CVE-2021-22764 is an improper authentication vulnerability affecting Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300. The issue can cause loss of connectivity to the device over Modbus TCP when an attacker sends a specially crafted HTTP request. Public documents identify the affe...

CVE-2021-22763

The CVE-2021-22763 entry concerns Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300 devices. A CWE-640 Weak Password Recovery Mechanism for Forgotten Password vulnerability could allow an attacker with administrator-level access to the device over the network. The issue is captured...

CVE-2021-22765

CVE-2021-22765 affects PowerLogic EGX100 (versions 3.0.0+), and all versions of PowerLogic EGX300. The issue is CWE-20: Improper Input Validation allowing denial of service or remote code execution via a specially crafted HTTP packet. The Red Hat/NVD entries corroborate impact as network-accessib...

CVE-2021-22766

The CVE-2021-22766 issue affects Schneider Electric PowerLogic EGX100 (versions 3.0.0 and newer) and PowerLogic EGX300 (all versions). It is a CWE-20 Improper Input Validation vulnerability that could cause Denial of Service via a specially crafted HTTP packet. Red Hat, CNVD/CNNVD, Tenable OT, an...

CVE-2021-22768

CVE-2021-22768 affects Schneider Electric PowerLogic EGX100 (v3.0.0 and newer) and EGX300 (All Versions). The root cause is CWE-20: improper input validation, allowing a specially crafted HTTP packet to cause denial of service or remote code execution. Documents confirm the vulnerability details ...

CVE-2021-22767

The CVE-2021-22767 entry concerns Schneider Electric PowerLogic EGX100 (Versions 3.0.0 and newer) and PowerLogic EGX300 (All Versions) with a CWE-20 (Improper Input Validation) flaw that could cause denial of service or remote code execution via a specially crafted HTTP packet. Affected component...

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

PT-2021-15206 · Schneider Electric · Powerlogic Egx100 +1

Name of the Vulnerable Software and Affected Versions: PowerLogic EGX100 versions 3.0.0 and newer PowerLogic EGX300 all versions Description: A vulnerability exists due to improper input validation, potentially causing denial of service or remote code execution via a specially crafted HTTP packet...