PowerLogic HDPM6000 vulnerabilities

2 known vulnerabilities in PowerLogic HDPM6000 from Schneider Electric. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  PowerLogic HDPM6000: Authorization Bypass Through User-Controlled Key

  CVE-2024-10497Jan 17, 2025Schneider Electric

  CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges (Elevation of Privileges) when the attacker sends modified HTTPS requests to the d

• 9.8 Critical severity

  PowerLogic HDPM6000: Improper Validation of Array Index

  CVE-2023-28004Apr 18, 2023Schneider ElectricEPSS 1.12%

  A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could result in denial of service or remote code execution.