CVE:CVE-2021-22763
CNNVD:CNNVD-202106-1009
PowerLogic EGX300是法国施耐德（Schneider-electric）的应用服务器一个集成网关服务器
PowerLogic 的PM55xx、PM8ECC、EGX100和 EGX300存在安全漏洞，该漏洞源于PowerLogic PM55xx、PowerLogic PM8ECC、PowerLogic EGX100和PowerLogic EGX300中存在遗忘密码的弱密码恢复机制漏洞。攻击者可利用该漏洞管理员级访问设备。
solution:Upgrade schneider-electric powerlogic_pm5560_firmware to a higher version than 2.7.8,and avoid the version (,2.7.8); Upgrade schneider-electric powerlogic_pm5561_firmware to a higher version than 10.7.3,and avoid the version (,10.7.3); Upgrade schneider-electric powerlogic_pm5562_firmware to a higher version than 2.5.4,and avoid the version (,2.5.4]; Upgrade schneider-electric powerlogic_pm5563_firmware to a higher version than 2.7.8,and avoid the version (,2.7.8); Upgrade schneider-electric powerlogic_pm8ecc_firmware to a higher version than *