high8.8
CVE-2022-46680
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or mod…
Impact
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schneider-Electric | Powerlogic Ion9000 Firmware | before 4.0.0 |
| Schneider-Electric | Powerlogic Ion7400 Firmware | before 4.0.0 |
| Schneider-Electric | Powerlogic Pm8000 Firmware | before 4.0.0 |
| Schneider-Electric | Powerlogic Ion8650 Firmware | All versions |
| Schneider-Electric | Powerlogic Ion8800 Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf
- https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf