CVE-2022-46680
High
Description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSchneider-electric Powerlogic Ion9000 Firmware
PublishedMay 22, 2023
First seenMay 22, 2023
Weakness typeCWE-319CWE-319
How to fix
Update
- schneider-electric powerlogic_ion9000_firmware4.0.0 or later
- schneider-electric powerlogic_ion7400_firmware4.0.0 or later
- schneider-electric powerlogic_pm8000_firmware4.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| schneider-electric powerlogic_ion9000_firmware | v < 4.0.0 | 4.0.0 |
| schneider-electric powerlogic_ion7400_firmware | v < 4.0.0 | 4.0.0 |
| schneider-electric powerlogic_pm8000_firmware | v < 4.0.0 | 4.0.0 |
| schneider-electric powerlogic_ion8650_firmware | No range specified | — |
| schneider-electric powerlogic_ion8800_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.