CVE-2024-9409: Schneider Electric Powerlogic PM5320 Firmware

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

CWE-400: An Uncontrolled Resource Consumption vulnerability exists that could cause the device to become unresponsive resulting in communication loss when a large amount of IGMP packets is present in the network.

Affected products

• Schneider Electric Powerlogic PM5320 Firmware: before 2.4.0 (fixed in 2.4.0)
• Schneider Electric Powerlogic PM5340 Firmware: before 2.4.0 (fixed in 2.4.0)
• Schneider Electric Powerlogic PM5341 Firmware: before 2.7.0 (fixed in 2.7.0)

Published 2024-11-13. Last modified 2026-06-17.