28 matches found
CVE-2021-22763
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...
EUVD-2016-6753
Malware in sbrugna...
EUVD-2016-5500
Malware in sbrugna...
EUVD-2021-9898
Malicious code in bioql PyPI...
EUVD-2021-9899
Malicious code in bioql PyPI...
Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC Weak Password Recovery Mechanism For Forgotten Password (CVE-2021-22763)
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device. This plug...
CVE-2021-22764
A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...
Design/Logic Flaw
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...
CVE-2021-22763
The CVE-2021-22763 entry concerns Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300 devices. A CWE-640 Weak Password Recovery Mechanism for Forgotten Password vulnerability could allow an attacker with administrator-level access to the device over the network. The issue is captured...
CVE-2021-22764
CVE-2021-22764 is an improper authentication vulnerability affecting Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300. The issue can cause loss of connectivity to the device over Modbus TCP when an attacker sends a specially crafted HTTP request. Public documents identify the affe...
Schneider-electric PowerLogic 多款产品授权问题漏洞
PowerLogic EGX300 is a French Schneider-electric application server an integrated gateway server A security vulnerability exists in PowerLogic's PM55xx, PM8ECC, EGX100, and EGX300 that stems from a weak password recovery from forgotten passwords vulnerability in the PowerLogic PM55xx, PowerLogic...
Schneider Electric PowerLogic PM8ECC < 2.651 Hardcoded Credentials
Binary data 720085.prm...
Schneider Electric PowerLogic PM8ECC < 2.651 XSS
Binary data 720081.prm...
Hardcoded credentials
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
CVE-2016-5818
CVE-2016-5818 affects Schneider Electric PowerLogic PM8ECC module up to version 2.651. The vulnerability arises from undocumented hard-coded credentials that grant access to the device, enabling remote access to configuration data. Public advisories note a remote-exploit possibility; no widely kn...
CVE-2016-5818
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device...
Schneider Electric PowerLogic PM8ECC Security Bypass Vulnerability
The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. A security bypass vulnerability exists in Schneider Electric PowerLogic PM8ECC for PowerMeter 800 prior to version 2.651, which can be exploited by an attacker to bypas...
Schneider Electric PowerLogic PM8ECC Module Unauthorized Access Vulnerability
The Schneider Electric PowerLogic PM8ECC is a communication module for use in 800 series meters from Schneider Electric, France. An unauthorized access vulnerability exists in the Schneider Electric PowerLogic PM8ECC module that could be exploited by an attacker to gain full privileges to the web...