CVE-2022-46680

State: Published
Severity: 8.8 High
Published: May 22, 2023
Updated: Jan 21, 2025
Reserved: Dec 6, 2022

Description

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	schneider

Weaknesses

CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

Product	Versions
PowerLogic ION9000Schneider Electric	Prior to 4.0.0Affected
PowerLogic ION7400Schneider Electric	Prior to 4.0.0Affected
PowerLogic PM8000Schneider Electric	Prior to 4.0.0Affected
PowerLogic ION8650Schneider Electric	All VersionsAffected
PowerLogic ION8800Schneider Electric	All VersionsAffected
Legacy ION productsSchneider Electric	All VersionsAffected

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-129-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-129-03.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.