CVE:CVE-2021-22764
CNNVD:CNNVD-202106-1008
Schneider Electric PowerLogic是法国施耐德电气（Schneider Electric）公司的一个工控设备。提供提高功率因数来提高电源质量，排除电源故障，从而保护网络、装置和操作员。
 PowerLogic 的PM55xx、PM8ECC、EGX100和EGX300存在授权问题漏洞，该漏洞源于PowerLogic PM55xx、PowerLogic PM8ECC、PowerLogic EGX100和PowerLogic EGX300存在不正确的身份验证。攻击者可利用该漏洞发送一个特殊的HTTP请求时，可能会导致通过Modbus TCP协议连接设备的丢失。
solution:Upgrade schneider-electric powerlogic_pm5560_firmware to a higher version than 2.7.8,and avoid the version (,2.7.8); Upgrade schneider-electric powerlogic_pm5561_firmware to a higher version than 10.7.3,and avoid the version (,10.7.3); Upgrade schneider-electric powerlogic_pm5562_firmware to a higher version than 2.5.4,and avoid the version (,2.5.4]; Upgrade schneider-electric powerlogic_pm5563_firmware to a higher version than 2.7.8,and avoid the version (,2.7.8)