208 matches found
Schneider Electric PowerLogic PM5560
1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: PowerLogic PM5560 Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow user input to be manipulated,...
Powerlogic / Schneider Electric IONXXXX Series - Cross-Site Request Forgery Vulnerability
Exploit for php platform in category web applications Exploit Title: Powerlogic Schneider Electric IONXXXX Series - Cross-Site Request Forgery Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Version: ION73XX series, ION75XX series, ION76XX series, ION8650 series,...
Powerlogic/Schneider Electric IONXXXX Series - Cross-Site Request Forgery
Exploit Title: Powerlogic Schneider Electric IONXXXX Series - Cross-Site Request Forgery Date: 2018-05-17 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Version: ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, PM5XXX series. Tested o...
Powerlogic/Schneider Electric IONXXXX Series Cross Site Request Forgery
Exploit Title: Powerlogic Schneider Electric IONXXXX Series - Cross-Site Request Forgery Date: 2018-05-17 Exploit Author: t4rkd3vilz Vendor Homepage: http://www.schneider-electric.com/ Version: ION73XX series, ION75XX series, ION76XX series, ION8650 series, ION8800 series, PM5XXX series. Tested o...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
Hardcoded credentials
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
CVE-2016-5818
CVE-2016-5818 affects Schneider Electric PowerLogic PM8ECC module up to version 2.651. The vulnerability arises from undocumented hard-coded credentials that grant access to the device, enabling remote access to configuration data. Public advisories note a remote-exploit possibility; no widely kn...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
Schneider Electric PowerLogic PM8ECC Security Bypass Vulnerability
The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. A security bypass vulnerability exists in Schneider Electric PowerLogic PM8ECC for PowerMeter 800 prior to version 2.651, which can be exploited by an attacker to bypas...
Schneider Electric PowerLogic PM8ECC Module Unauthorized Access Vulnerability
The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. An unauthorized access vulnerability exists in the Schneider Electric PowerLogic PM8ECC module that could be exploited by an attacker to gain full privileges to the web...
Schneider Electric PowerLogic PM8ECC XSS vulnerability
No description provided by source...
Schneider Electric PowerLogic PM8ECC Hard-coded Password Vulnerability
OVERVIEW Independent researcher He Congwen has identified a hard-coded password vulnerability in Schneider Electric’s PowerLogic PM8ECC device. Schneider Electric has produced a patch to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following...
Schneider Electric PowerLogic PM8ECC 模块未授权访问漏洞
PowerLogic PM8ECC是800 PowerMeter系列设备的通讯模块。根据施耐德电气描述, PowerLogic PM8ECC部署于商业设施部门并已在全世界广泛使用。 漏洞描述： 1.访问/status.htm页面。在没登录的情况下发现“User”处有一字符串； 2.以该字符串作为用户名和密码即可登录该设备的Web管理界面和FTP（如有），虽然用户列表中无该用户。...
CVE-2016-4513
Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4513
Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-4513
CVE-2016-4513 corresponds to a Cross-site Scripting (XSS) vulnerability in Schneider Electric PowerLogic PM8ECC module for PowerMeter 800 devices, fixed in firmware version 2.651. Affected product: PowerLogic PM8ECC (Series 800). Root cause: improper handling of input in the web interface enablin...
Schneider Electric PowerLogic PM8ECC Cross-Site Scripting Vulnerability
The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. A cross-site scripting vulnerability exists in the Schneider Electric PowerLogic PM8ECC using firmware prior to version 2.651. A remote attacker could exploit the...