CVE-2016-5818 Hardcoded credentials in Schneider Electric PowerLogic 2.651 and older
Undocumented hard-coded credentials in Schneider Electric PowerLogic devices allow attackers to gain unauthorized access to the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-5818?
CVE-2016-5818 is a critical vulnerability in Schneider Electric PowerLogic 2.651 and older, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Schneider Electric PowerLogic PM8ECC device 2.651 and older. Undocumented hard-coded credentials allow access to the device.
Weakness: CWE-798
Which versions are affected by CVE-2016-5818?
It affects 1 product.
Products include Schneider-Electric Powerlogic Pm8ecc Firmware.
How do I fix CVE-2016-5818?
No fix has been published for CVE-2016-5818 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-5818 being exploited?
There is no known exploitation of CVE-2016-5818 in the wild and no public exploit code.
Other vulnerabilities in Schneider Electric PowerLogic 2.651 and older
Sources
Also known as GHSA-h379-q7pp-897w.