Schneider Electric PowerLogic ION9000
En bref
- Source
- NVD
- EPSS
- EPSS 0.38 % · centile 32 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- schneider
- Statut NVD
- Modified
Rechercher sur…
Description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic.
Faiblesses (CWE)
- CWE-319 — Transmission en clair d'informations sensibles
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | schneider |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | NVD · cybersecurity@se.com (Secondary) |
| CVSS 3.1 | CRITICAL 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2022-49476
- GCVE · GCVE-0-2022-46680
Avis du CERT-FR
- CERTFR-2023-AVI-0363 — Multiples vulnérabilités dans les produits Schneider · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*< 4.0.0cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*< 4.0.0cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*< 4.0.0cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:-:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Schneider Electric · PowerLogic ION9000 | affected Prior to 4.0.0 |
| Schneider Electric · PowerLogic ION7400 | affected Prior to 4.0.0 |
| Schneider Electric · PowerLogic PM8000 | affected Prior to 4.0.0 |
| Schneider Electric · PowerLogic ION8650 | affected All Versions |
| Schneider Electric · PowerLogic ION8800 | affected All Versions |
| Schneider Electric · Legacy ION products | affected All Versions |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |