PT-2021-15176

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400 affected versions not specified PowerLogic ION7650 affected versions not specified PowerLogic ION83xx/84xx/85xx/8600 affected versions not specified PowerLogic ION8650 affected versions not specified PowerLogic ION8800...

CVE-2021-22703: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor intercepts HTT...

CVE-2021-22702: Cleartext Transmission of Sensitive Information

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause disclosure of user credentials when a malicious actor...

CVE-2021-22701: Cross-Site Request Forgery (CSRF)

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

PT-2021-3888

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800 affected versions not specified Description The issue is related to insufficient authentication of executed requests, which could allow a remote attacker to...

PT-2021-3898

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 affected versions not specified Description A Cleartext transmission of sensitive information issue exists, which could cause disclosure of...

Vijeo Citect, CitectSCADA, and PowerLogic SCADA systems are vulnerable to data collection and industrial automation process control. This vulnerability stems from deficiencies in access control for certain functions, allowing attackers to read arbitrary files, send HTTP requests, or cause service interruptions.

The vulnerabilities of systems for data collection and process control in Vijeo Citect, CitectSCADA, and PowerLogic SCADA are related to deficiencies in access control for certain functions. Exploiting these vulnerabilities can allow attackers to read arbitrary files, send HTTP requests, or cause...

Schneider Electric PowerLogic PM210 Power Meter Detection

Binary data 271.prm...

Schneider Electric PowerLogic PM700 Series Power Meter Detection

Binary data 275.prm...

Schneider Electric PowerLogic ION6200 Power Meter Detection

Binary data 270.prm...

Schneider Electric PowerLogic PM1200 Power Meter Detection

Binary data 274.prm...

Schneider Electric PowerLogic PM5000 Series Power Meter Detection

Binary data 276.prm...

The vulnerability of Schneider Electric PowerLogic PM5560 power meter measurement software lies in the insufficient protection of its web page structure, allowing attackers to execute arbitrary code.

The vulnerability of Schneider Electric PowerLogic PM5560 power meter measurement software relates to insufficient protection of the website structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2018-7795

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code...

Cross site scripting

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code...

CVE-2018-7795

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code...

CVE-2018-7795

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code...

CVE-2018-7795

The CVE-2018-7795 entry corresponds to Schneider Electric PowerLogic PM5560 (all versions prior to firmware 2.5.4) with an vulnerability described as Improper Neutralization of Input During Web Page Generation (Cross-Site Scripting). The root cause is input handling in the web interface that allo...

CVE-2018-7795

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code...

High-Severity Flaws Patched in Schneider Electric Products

Schneider Electric has released fixes for a slew of vulnerabilities that can be exploited remotely in two of its industrial control system products. The two flaws, which exist in Schneider Electric’s power management system, PowerLogic PM5560, and its programmable logic controller, Modicon M221,...