by Kastro
Paper/Archive/CVE-2022-46680

CVE-2022-46680

Schneider Electric PowerLogic ION9000 — A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, den…

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 31.9.319 × 206.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

Affected

ProductAffectedFixed inSource
PowerLogic ION9000Prior to 4.0.0–CNA
PowerLogic ION7400Prior to 4.0.0–CNA
PowerLogic PM8000Prior to 4.0.0–CNA
PowerLogic ION8650All Versions–CNA
PowerLogic ION8800All Versions–CNA
Legacy ION productsAll Versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
schneider (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refdownload.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf