CVEvulnerability
CVE-2022-46680
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-319
Description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.
Affected configurations
• schneider-electric powerlogic ion9000 firmware (< 4.0.0)
• schneider-electric powerlogic ion7400 firmware (< 4.0.0)
• schneider-electric powerlogic pm8000 firmware (< 4.0.0)
• schneider-electric powerlogic ion8650 firmware
• schneider-electric powerlogic ion8800 firmware
Related
Weakness · CWE (1)
- CWE-319 Cleartext Transmission of Sensitive Information weakness
References
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf Vendor Advisory
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf Vendor Advisory