First published: Mon Feb 13 2017(Updated: )
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Schneider-electric Powerlogic Pm8ecc Firmware | =2.651 | |
Schneider-electric Powerlogic Pm8ecc |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-5818 is classified as a high severity vulnerability due to the presence of hard-coded credentials.
CVE-2016-5818 allows unauthorized access to Schneider Electric PowerLogic PM8ECC devices due to undocumented hard-coded credentials.
To mitigate CVE-2016-5818, users should update the firmware of their Schneider Electric PowerLogic PM8ECC devices to a version that addresses this vulnerability.
CVE-2016-5818 affects Schneider Electric PowerLogic PM8ECC device firmware versions 2.651 and older.
Yes, users should upgrade to a secure firmware version provided by Schneider Electric to address CVE-2016-5818.