Skip to content
OpenAdvisories
High SEVD-2021-040-01 3 CVEs

PowerLogic Power Metering Products

Published Feb 8, 2021 · Updated Feb 8, 2021

Vendor: Schneider Electric Product: ION7400 Product: ION7650 Product: ION7700/73xx Product: ION83xx/84xx/85xx/8600 Product: ION8650 Product: ION8800 Product: ION9000 Product: PM8000 Product: PowerLogic ION7400 Product: PowerLogic ION8650 Product: PowerLogic ION9000 Product: PowerLogic PM8000

Summary

Customers should use appropriate methodologies when applying these upgrades to their devices. We strongly recommend evaluating the impact of these updates in a test and development environment prior to deployment. Contact Schneider Electric's Customer Care Center if you need assistance reverting to an older version of firmware.

Vulnerabilities 3

  • Medium 6.1
    CVE-2021-22701

    A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8…

  • Medium 5.9
    CVE-2021-22702

    A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700…

  • Medium 5.9
    CVE-2021-22703

    A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx…

Revision history

  1. #1.0.0

    Original Release

References