CVE-2022-46680 — Schneider Electric / PowerLogic ION9000

Description (CNA)

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

Affected (CNA)

Vendor / product	Versions
Schneider Electric / PowerLogic ION9000	affected Prior to 4.0.0
Schneider Electric / PowerLogic ION7400	affected Prior to 4.0.0
Schneider Electric / PowerLogic PM8000	affected Prior to 4.0.0
Schneider Electric / PowerLogic ION8650	affected All Versions
Schneider Electric / PowerLogic ION8800	affected All Versions
Schneider Electric / Legacy ION products	affected All Versions

CWE

CWE-319

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf

ADP enrichment

CVE

No English description supplied.

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf

CISA-ADP

No English description supplied.

No references supplied.