CVE-2024-10497 — Schneider Electric / PowerLogic HDPM6000

CVE-2024-10497

Schneider Electric / PowerLogic HDPM6000 PUBLISHED

Description (CNA)

CWE-639: Authorization Bypass Through User-Controlled Key vulnerability exists that could allow an authorized attacker to modify values outside those defined by their privileges (Elevation of Privileges) when the attacker sends modified HTTPS requests to the device.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / PowerLogic HDPM6000	affected Version v0.62.7 only

CWE

CWE-639

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-014-08&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-014-08.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.