Description
CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an
authorized attacker to modify values outside those defined by their privileges (Elevation of Privileges) when the
attacker sends modified HTTPS requests to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | PowerLogic HDPM6000 | Version v0.62.7 only | — |
Advisories 2
- ICSA-25-028-02 Schneider Electric Power Logic CISA ICS & IT advisories · Jan 28, 2025
- SEVD-2025-014-08 Power Logic HDPM6000 High-Density Metering System Schneider Electric CPCERT · Jan 14, 2025