CVE-2021-22763: Schneider Electric Powerlogic PM5560 Firmware

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

Affected products

• Schneider Electric Powerlogic PM5560 Firmware: before 2.7.8 (fixed in 2.7.8)
• Schneider Electric Powerlogic PM5561 Firmware: before 10.7.3 (fixed in 10.7.3)
• Schneider Electric Powerlogic PM5562 Firmware: up to and including 2.5.4
• Schneider Electric Powerlogic PM5563 Firmware: before 2.7.8 (fixed in 2.7.8)
• Schneider Electric Powerlogic PM8ECC Firmware: any version

Published 2021-06-11. Last modified 2026-06-17.