CVE-2021-22713 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Ion7650 Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

7.5HIGHNVD

EPSS

0.4%

top 41.30%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schneider-electric Ion7650 Firmware Schneider-electric Powerlogic Ion7550 Firmware Schneider-electric Powerlogic Ion7650 Firmware +2 more

Timeline

PublishedMar 11

Latest updateMay 24

Description

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages5 packages

▶NVDschneider-electric/powerlogic_ion7650_firmware< 376

▶NVDschneider-electric/powerlogic_ion8650_firmware< 4.40.1

▶NVDschneider-electric/powerlogic_ion8800_firmware< 372

▶NVDschneider-electric/ion7650_firmware< 416

▶NVDschneider-electric/powerlogic_ion7550_firmware< 376+1

🔴Vulnerability Details

GHSA

GHSA-fp3q-76ww-6mv4: A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION770↗2022-05-24

▶

CVEList

CVE-2021-22713: A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION770↗2021-03-11

▶

VulnCheck

Schneider Electric powerlogic_ion8650_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer↗2021

▶