Summary
Schneider Electric is aware of a vulnerability in its PowerLogic™ HDPM6000 products.
The PowerLogic™ HDPM6000 products are high density, multi-circuit busway and panelboard
power meters.
Failure to apply the mitigation provided below may risk a buffer overflow attack, which could
result in denial of service or remote code execution.
Vulnerabilities 1
-
Critical 9.8
A CWE-129: Improper validation of an array index vulnerability exists where a specially crafted Ethernet request could …
Revision history
-
#1
Original Release
References
-
PowerLogic™ HDPM6000 - SEVD-2023-073-02 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-073-02&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-073-02.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/