CVE-2021-22764: Schneider Electric Powerlogic PM5560 Firmware

Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days.

A CWE-287: Improper Authentication vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could cause loss of connectivity to the device via Modbus TCP protocol when an attacker sends a specially crafted HTTP request.

Affected products

• Schneider Electric Powerlogic PM5560 Firmware: before 2.7.8 (fixed in 2.7.8)
• Schneider Electric Powerlogic PM5561 Firmware: before 10.7.3 (fixed in 10.7.3)
• Schneider Electric Powerlogic PM5562 Firmware: up to and including 2.5.4
• Schneider Electric Powerlogic PM5563 Firmware: before 2.7.8 (fixed in 2.7.8)

Published 2021-06-11. Last modified 2026-06-17.