CVE-2022-46680

published 2023-05-22

CVE-2022-46680: A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	powerlogic_ion7400_firmware	< 4.0.0	4.0.0
schneider-electric	powerlogic_ion9000_firmware	< 4.0.0	4.0.0
schneider-electric	powerlogic_pm8000_firmware	< 4.0.0	4.0.0
schneider_electric	legacy_ion_products	—	—
schneider_electric	powerlogic_ion7400	—	—
schneider_electric	powerlogic_ion8650	—	—
schneider_electric	powerlogic_ion8800	—	—
schneider_electric	powerlogic_ion9000	—	—
schneider_electric	powerlogic_pm8000	—	—

CWE-319