Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

209 matches found

OSV
OSV•added 2021/06/11 4:15 p.m.•9 views

CVE-2021-22766

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

7.5CVSS7.1AI score0.0129EPSS
SaveExploits0References1
OSV
OSV•added 2021/06/11 4:15 p.m.•11 views

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

9.8CVSS7.4AI score0.0273EPSS
SaveExploits0References1
NVD
NVD•added 2021/06/11 4:15 p.m.•28 views

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

5.3CVSS0.01874EPSS
SaveExploits0References2
NVD
NVD•added 2021/06/11 4:15 p.m.•22 views

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

9.8CVSS0.0273EPSS
SaveExploits0References1
NVD
NVD•added 2021/06/11 4:15 p.m.•19 views

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

9.8CVSS0.0273EPSS
SaveExploits0References1
OSV
OSV•added 2021/06/11 4:15 p.m.•10 views

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

5.3CVSS6.1AI score0.01874EPSS
SaveExploits0References2
OSV
OSV•added 2021/06/11 4:15 p.m.•8 views

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

9.8CVSS7.8AI score0.0273EPSS
SaveExploits0References1
Prion
Prion•added 2021/06/11 4:15 p.m.•16 views

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

5CVSS5.3AI score0.01874EPSS
SaveExploits0References1Affected Software4
Prion
Prion•added 2021/06/11 4:15 p.m.•27 views

Design/Logic Flaw

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

10CVSS9.2AI score0.01858EPSS
SaveExploits0References1Affected Software4
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•5 views

CVE-2021-22767

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-2276...

9.8CVSS7.8AI score0.0273EPSS
SaveExploits0References2
Prion
Prion•added 2021/06/11 4:15 p.m.•17 views

Input validation

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

7.5CVSS9.4AI score0.0273EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2021/06/11 4:15 p.m.•30 views

Input validation

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from...

7.5CVSS9.5AI score0.0273EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•7 views

CVE-2021-22766

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

7.5CVSS7.1AI score0.0129EPSS
SaveExploits0References2
Prion
Prion•added 2021/06/11 4:15 p.m.•22 views

Input validation

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from...

7.5CVSS9.5AI score0.0273EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2021/06/11 4:15 p.m.•19 views

Input validation

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service via a specially crafted HTTP packet...

5CVSS7.3AI score0.0129EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•6 views

CVE-2021-22763

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could allow an attacker administrator level access to a device...

10CVSS7.2AI score0.01858EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•7 views

CVE-2021-22764

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 see security notification for version infromation that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially...

5.3CVSS6AI score0.01874EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•6 views

CVE-2021-22768

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from CVE-2021-22767...

9.8CVSS7.8AI score0.0273EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB•added 2021/06/11 4:15 p.m.•5 views

CVE-2021-22765

A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet...

9.8CVSS7.8AI score0.0273EPSS
SaveExploits0References2
CVE
CVE•added 2021/06/11 3:40 p.m.•68 views

CVE-2021-22764

CVE-2021-22764 is an improper authentication vulnerability affecting Schneider Electric PowerLogic PM55xx, PM8ECC, EGX100, and EGX300. The issue can cause loss of connectivity to the device over Modbus TCP when an attacker sends a specially crafted HTTP request. Public documents identify the affe...

5.3CVSS5.3AI score0.01874EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder