CVE-2018-7795: Schneider Electric Powerlogic PM5560 Firmware

Medium severity, CVSS 5.4. EPSS: 2.3% chance of exploitation in the next 30 days.

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic (PM5560 prior to FW version 2.5.4) product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code.

Affected products

• Schneider Electric Powerlogic PM5560 Firmware: before 2.5.4 (fixed in 2.5.4)

Published 2018-08-29. Last modified 2026-06-17.