CVE-2021-22763
highpriority · track · 40EPSS 0.019 · 80 %ileEUUSEPSS · scored 2026-10-27
A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedPowerLogic PM5560cisa_csaf_ot
Version 2.8.3 of the PowerLogic PM5560, 5563, 5580 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-and-control - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware - FixedPowerLogic PM5561cisa_csaf_ot
Version 10.7.3 of the PowerLogic PM5561 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-andcontrol#software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware - FixedPowerLogic PM5562cisa_csaf_ot
Version 4.3.5 of the PowerLogic PM5562 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000/12146169702-basic-multifunction-metering/?selectednode-id=12146169702&N=brand=se%26countrycode=UK%26language-code=en%26node-id=12146169702 - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&selected-node-id=12146169702&N=brand%253Dse%2526country-code%253DUK%2526language-code%253Den%2526node-id%253D12146169702#software-and-firmware - FixedPowerLogic PM5563cisa_csaf_ot
Version 2.8.3 of the PowerLogic PM5560, 5563, 5580 firmware includes fixes for these vulnerabilities. The version update files are available for download here: https://www.se.com/ww/en/product-range/61281-powerlogicpm5000-power-meters/?parent-subcategoryid=4125&filter=business-2-building-automation-and-control - software-and-firmware If customers choose not to apply the remediation provided above, they should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level or disable the HTTP web service to reduce the risk of exposure.
https://www.se.com/ww/en/product-country-selector/?pageType=product-range&sourceId=61281&parent-subcategory-id=4125&filter=business-2-building-automation-and-control#software-and-firmware - FixedPowerLogic PM8ECCcisa_csaf_ot
PowerLogic PM8ECC has reached end of service and is no longer supported. Customers should immediately apply the following mitigation to reduce the risk of exploit: Customers should consider blocking HTTP access to the device at the firewall level once commissioning is complete to reduce the risk of exposure. Additionally, Customers should ensure the General security Recommendations listed below are in place.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–10
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (26)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-24-331-01Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC2021-06-08icsa · cisa_csaf_otUS
Overview Schneider Electric is aware of a vulnerability in its PowerLogic PM55xx and PowerLogic PM8ECC products. The PowerLogic PM55xx products are power metering devices. The PowerLogic PM8ECC product is an ethernet communication module. Failure to apply the mitigations or remediations provided below may risk elevation of privileges, which could result in loss of control of the affected device.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02cnnvd
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02,http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03Patchcnnvd
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2021-22763cnnvd
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-159-02.pdfenisa_euvd
- http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02%2Chttp://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-03nvd
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-159-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-159-02.pdfnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan