CVE-2021-22763

CVE-2021-22763

Vendor N/A
Product PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation)
Weakness CWE-640 · Weak password recovery
Published June 11, 2021
Last update May 29, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in PowerLogic PM55xx, PowerLogic PM8ECC, PowerLogic EGX100 and PowerLogic EGX300 (see security notification for version infromation) that could allow an attacker administrator level access to a device.

Key dates

02Disclosure timeline

June 11, 2021 CVE published
May 29, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-7459 Simple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint CVE-2023-46138 JumpServer default admin user email leak password reset CVE-2026-7652 LatePoint <= 5.5.0 - Unauthenticated Account Takeover via Weak Password Recovery Mechanism CVE-2024-12295 BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password CVE-2018-16529