Schneider Electric PowerLogic ION Setup 信任管理问题漏洞

Schneider Electric PowerLogic ION Setup is a free, user-friendly configuration tool from Schneider Electric France. It provides an intuitive environment for setting up and verifying the settings of PowerLogic meters and other devices. Schneider Electric is vulnerable to a trust management issue...

Schneider Electric PowerLogic ION Setup 输入验证错误漏洞

Schneider Electric PowerLogic ION Setup is a free, user-friendly configuration tool from Schneider Electric France. It provides an intuitive environment for setting up and verifying the settings of PowerLogic meters and other devices. An input validation error vulnerability exists in Schneider...

Schneider Electric PowerLogic ION Setup 输入验证错误漏洞

Schneider Electric PowerLogic ION Setup is a free, user-friendly configuration tool from Schneider Electric France. It provides an intuitive environment for setting up and verifying the settings of PowerLogic meters and other devices. An input validation error vulnerability exists in Schneider...

Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC Improper Authentication (CVE-2021-22764)

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC Weak Password Recovery Mechanism For Forgotten Password (CVE-2021-22763)

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device. This plug...

Vulnerabilities fixed in Schneider Electric products

Schneider Electric has fixed vulnerabilities in its PowerLogic and Modicon products. The vulnerabilities allow an unauthenticated malicious person to cause a denial-of-service or gain access to sensitive data. To do so, rogue network traffic must be sent to the vulnerable device be sent. Schneide...

The vulnerability of the microprogrammed software for power meters and energy counters from PowerLogic models ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800 lies in the lack of protection for transmitted data. This allows unauthorized individuals to gain unauthorized access to the protected information.

The vulnerability of the microprogrammed software for PowerLogic power meters and energy counters, such as ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, and PM800, stems from the lack of protection for transmitted data. Exploiting this vulnerability can allow an unauthorize...

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, arises from the execution of operations beyond the buffer boundaries in memory. This allows an attacker to trigger a system reboot.

The vulnerability of the microprogrammed power measurement devices and energy meters from PowerLogic, models ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an...

The vulnerability of the microprogrammed software of PowerLogic energy meters and power counters, models ION7400, PM8000, and ION9000, arises from the execution of operations beyond the buffer boundaries in memory. This vulnerability allows a hacker to trigger a system reboot or execute arbitrary code.

The vulnerability of the microprogrammed power measurement and energy meter software from PowerLogic, models ION7400, PM8000, and ION9000, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a system...

The vulnerability of the microprogrammed software for power meters and energy counters from PowerLogic (ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800) stems from insufficient verification of the authenticity of the requests being executed. This allows attackers to perform inter-site fraudulently.

The vulnerability of microprogrammed power measurement instruments and energy counters from PowerLogic, such as ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, and PM800, stems from insufficient verification of the authenticity of the requests being sent. Exploiting this...

Unauthorized Access Vulnerability in PowerLogic ION7550 of Schneider Electric (China) Co.

Schneider Electric China Co., Ltd. is a global leader in energy efficiency management. Its main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data centers and intelligent living spaces. An...

Unauthorized Access Vulnerability in PowerLogic ION8650 at Schneider Electric (China) Co.

Schneider Electric China Co., Ltd. is a global leader in energy efficiency management, founded by the Schneider brothers in 1836. Its main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data...

Unauthorized access vulnerability in PowerLogic ION8600 of Schneider Electric (China) Limited (CNVD-2021-46857)

Schneider Electric China Co., Ltd. is a global leader in energy efficiency management. Its main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data centers and intelligent living spaces. An...

Schneider Electric PowerLogic Input Validation Error Vulnerability

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. It provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. An input validation error vulnerability exists in Schneider...

Schneider Electric PowerLogic Input Validation Error Vulnerability (CNVD-2021-46280)

Schneider Electric PowerLogic is an industrial control device from Schneider Electric, France. It provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices, and operators. An input validation error vulnerability exists in the Schneider...

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

CVE-2021-22766

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...