Lucene search

[email protected]CVE-2021-22713

HistoryMar 11, 2021 - 9:15 p.m.

CVE-2021-22713

2021-03-1121:15:12

CWE-119

[email protected]

web.nvd.nist.gov

nvd

cve-2021-22713

cwe-119

powerlogic

ion8650

ion8800

ion7650

ion7700

ion73xx

ion83xx

ion84xx

ion85xx

ion8600

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot.

Affected configurations

NVD

Node

schneider-electricpowerlogic_ion8650_firmwareRange<4.40.1

AND

schneider-electricpowerlogic_ion8650Match-

Node

schneider-electricpowerlogic_ion8800_firmwareRange<372

AND

schneider-electricpowerlogic_ion8800Match-

Node

schneider-electricpowerlogic_ion7550_firmwareRange<376

AND

schneider-electricpowerlogic_ion7550Match4.0

Node

schneider-electricpowerlogic_ion7650_firmwareRange<376

AND

schneider-electricpowerlogic_ion7650Match4.0

Node

schneider-electricpowerlogic_ion7700_firmware

AND

schneider-electricpowerlogic_ion7700Match-

Node

schneider-electricpowerlogic_ion7300_firmware

AND

schneider-electricpowerlogic_ion7300Match-

Node

schneider-electricpowerlogic_ion8300_firmware

AND

schneider-electricpowerlogic_ion8300Match-

Node

schneider-electricpowerlogic_ion8400_firmware

AND

schneider-electricpowerlogic_ion8400Match-

Node

schneider-electricpowerlogic_ion8500_firmware

AND

schneider-electricpowerlogic_ion8500Match-

Node

schneider-electricpowerlogic_ion8600_firmware

AND

schneider-electricpowerlogic_ion8600Match-

Node

schneider-electricpowerlogic_ion7550_firmwareRange<416

AND

schneider-electricpowerlogic_ion7550Match5.0

Node

schneider-electricion7650_firmwareRange<416

AND

schneider-electricpowerlogic_ion7650Match5.0

CPENameOperatorVersion
schneider-electric:powerlogic_ion8650_firmwareschneider-electric powerlogic ion8650 firmwarelt4.40.1

CPE	Name	Operator	Version
schneider-electric:powerlogic_ion8650_firmware	schneider-electric powerlogic ion8650 firmware	lt	4.40.1

CNA Affected

[
  {
    "product": "PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions)"
      }
    ]
  }
]

References

www.se.com/ww/en/download/document/SEVD-2021-068-03

Social References

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.5%

JSON

Related for CVE-2021-22713

nessus1 cvelist1 nvd1 prion1 threatpost1