1. Home
  2. CVE Database
  3. CVE-2021-22702
HIGH · 7.5

CVE-2021-22702

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notificat...

Vulnerability Description

A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
Schneider-ElectricPowerlogic Ion7400 Firmware< 3.0.0
Schneider-ElectricPowerlogic Ion7400-
Schneider-ElectricPowerlogic Ion7650 FirmwareAll versions
Schneider-ElectricPowerlogic Ion7650-
Schneider-ElectricPowerlogic Ion7700 FirmwareAll versions
Schneider-ElectricPowerlogic Ion7700-
Schneider-ElectricPowerlogic Ion7300 FirmwareAll versions
Schneider-ElectricPowerlogic Ion7300-
Schneider-ElectricPowerlogic Ion8600 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8600-
Schneider-ElectricPowerlogic Ion8650 Firmware<= 4.31.2
Schneider-ElectricPowerlogic Ion8650-
Schneider-ElectricPowerlogic Ion8800 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8800-
Schneider-ElectricPowerlogic Ion9000 Firmware< 3.0.0
Schneider-ElectricPowerlogic Ion9000-
Schneider-ElectricPowerlogic Pm8000 Firmware< 3.0.0
Schneider-ElectricPowerlogic Pm8000-
Schneider-ElectricPowerlogic Ion8300 FirmwareAll versions
Schneider-ElectricPowerlogic Ion8300-

Related Weaknesses (CWE)

CWE-319

References

FAQ

What is CVE-2021-22702?

CVE-2021-22702 is a vulnerability with a CVSS score of 7.5 (HIGH). A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notificat...

How severe is CVE-2021-22702?

CVE-2021-22702 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22702?

Check the references section above for vendor advisories and patch information. Affected products include: Schneider-Electric Powerlogic Ion7400 Firmware, Schneider-Electric Powerlogic Ion7400, Schneider-Electric Powerlogic Ion7650 Firmware, Schneider-Electric Powerlogic Ion7650, Schneider-Electric Powerlogic Ion7700 Firmware.