CVE-2022-46680

published 2023-05-22

CVE-2022-46680: A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or…

Priority P3 42 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
schneider-electric	powerlogic_ion7400_firmware	< 4.0.0	4.0.0
schneider-electric	powerlogic_ion9000_firmware	< 4.0.0	4.0.0
schneider-electric	powerlogic_pm8000_firmware	< 4.0.0	4.0.0
schneider_electric	legacy_ion_products	—	—
schneider_electric	powerlogic_ion7400	—	—
schneider_electric	powerlogic_ion8650	—	—
schneider_electric	powerlogic_ion8800	—	—
schneider_electric	powerlogic_ion9000	—	—
schneider_electric	powerlogic_pm8000	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-319