Vulnerability · Published May 22, 2023 · Assigned by schneider
CVE-2022-46680
High 8.8
In plain English
A high-severity security flaw in Legacy ION products from Schneider Electric. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 68.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Schneider Electric | PowerLogic ION9000 | Prior to 4.0.0 |
| Schneider Electric | PowerLogic ION7400 | Prior to 4.0.0 |
| Schneider Electric | PowerLogic PM8000 | Prior to 4.0.0 |
| Schneider Electric | PowerLogic ION8650 | All Versions |
| Schneider Electric | PowerLogic ION8800 | All Versions |
| Schneider Electric | Legacy ION products | All Versions |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H