{"id":"CVE-2024-5559","aliases":["EUVD-2024-46758","GHSA-46fj-mg88-7m5g"],"status":"published","title":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause...","description":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause denial of service, device reboot, or an attacker gaining full control of the relay when a\nspecially crafted reset token is entered into the front panel of the device.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00181,"percentile":0.07727,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2024-06-12T17:18:04Z","modified":"2026-06-17T08:16:11Z","products":[{"vendor":"schneider electric","product":"powerlogic p5"},{"vendor":"schneider-electric","product":"powerlogic_p5_firmware"}],"references":[{"url":"https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-163-02\u0026p_enDocType=Security+and+Safety+Notice\u0026p_File_Name=SEVD-2024-163-02.pdf","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-5559"},{"url":"https://github.com/advisories/GHSA-46fj-mg88-7m5g"}],"sources":{"cve":[{"id":"CVE-2024-5559","description":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause denial of service, device reboot, or an attacker gaining full control of the relay when a\nspecially crafted reset token is entered into the front panel of the device.","status":"published","published":"2024-06-12T17:18:04.604Z","modified":"2024-08-01T21:18:06.557Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:34:01.286506Z"}],"euvd":[{"id":"EUVD-2024-46758","description":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause denial of service, device reboot, or an attacker gaining full control of the relay when a\nspecially crafted reset token is entered into the front panel of the device.","status":"published","published":"2024-06-12T17:18:04Z","modified":"2024-08-01T21:18:06Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:34.09192Z"}],"ghsa":[{"id":"GHSA-46fj-mg88-7m5g","title":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause...","description":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause denial of service, device reboot, or an attacker gaining full control of the relay when a\nspecially crafted reset token is entered into the front panel of the device.","status":"published","published":"2024-06-12T18:30:41Z","modified":"2024-06-12T18:30:48Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:57:28.765205Z"}],"nvd":[{"id":"CVE-2024-5559","description":"CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could\ncause denial of service, device reboot, or an attacker gaining full control of the relay when a\nspecially crafted reset token is entered into the front panel of the device.","status":"published","published":"2024-06-12T18:15:12.493Z","modified":"2026-06-17T08:16:11.623Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T14:10:04.804473Z"}]}}