Summary
Schneider Electric is aware of multiple vulnerabilities in its Power Logic HDPM6000 High-Density Metering
System product.
The HDPM6000 products are high-density, multi-circuit busway and panelboard power meters for cost and
network management in large and critical power applications.
Failure to apply the remediation provided below may risk a low privileged user gaining higher level access,
which could allow for modification of system configuration parameters or an unauthenticated user causing data
corruption or denial of service to the devices web interface via a specially crafted Modbus protocol write
operation.
Vulnerabilities 2
-
High 8.8
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker …
-
Medium 6.5
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could allow …
Revision history
-
#1.0.0
Original Release
References
-
Power Logic HDPM6000 High-Density Metering System - SEVD-2025-014-08 PDF Version
https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-08&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-08.pdf
-
Recommended Cybersecurity Best Practices
https://www.se.com/us/en/download/document/7EN52-0390/