1. Home
  2. CVE Database
  3. CVE-2021-22701
MEDIUM · 4.5

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that co...

Vulnerability Description

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface.

CVSS Score

4.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
Schneider-ElectricPowerlogic Ion7400 Firmware< 3.0.0
Schneider-ElectricPowerlogic Ion7400-
Schneider-ElectricPowerlogic Ion7410-
Schneider-ElectricPowerlogic Ion7650 FirmwareAll versions
Schneider-ElectricPowerlogic Ion7650-
Schneider-ElectricPowerlogic Ion8600 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8600-
Schneider-ElectricPowerlogic Ion8650 Firmware<= 4.31.2
Schneider-ElectricPowerlogic Ion8650-
Schneider-ElectricPowerlogic Ion8800 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8800-
Schneider-ElectricPowerlogic Ion9000 Firmware< 3.0.0
Schneider-ElectricPowerlogic Ion9000-
Schneider-ElectricPowerlogic Pm8000 Firmware< 3.0.0
Schneider-ElectricPowerlogic Pm8000-
Schneider-ElectricPowerlogic Ion8300 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8300-
Schneider-ElectricPowerlogic Ion8400 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8400-
Schneider-ElectricPowerlogic Ion8500 FirmwareAll versions

Related Weaknesses (CWE)

CWE-352

References

FAQ

What is CVE-2021-22701?

CVE-2021-22701 is a vulnerability with a CVSS score of 4.5 (MEDIUM). A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that co...

How severe is CVE-2021-22701?

CVE-2021-22701 has been rated MEDIUM with a CVSS base score of 4.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22701?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic Ion7400 Firmware, Schneider-Electric Powerlogic Ion7400, Schneider-Electric Powerlogic Ion7410, Schneider-Electric Powerlogic Ion7650 Firmware, Schneider-Electric Powerlogic Ion7650.