Description
A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Schneider Electric | PowerLogic ION9000 | Prior to 4.0.0 | — |
| Schneider Electric | PowerLogic ION7400 | Prior to 4.0.0 | — |
| Schneider Electric | PowerLogic PM8000 | Prior to 4.0.0 | — |
| Schneider Electric | PowerLogic ION8650 | All Versions | — |
| Schneider Electric | PowerLogic ION8800 | All Versions | — |
| Schneider Electric | Legacy ION products | All Versions | — |
Advisories 2
- ICSA-23-229-03 Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters CISA ICS & IT advisories · Aug 17, 2023
- SEVD-2023-129-03 PowerLogic ION7400 / PM8000 / ION9000 Power Meters Schneider Electric CPCERT · May 9, 2023