Vulnerabilities fixed in Schneider Electric equipment

🗓️ 11 Feb 2021 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 2 Views

Schneider Electric fixed vulnerabilities allowing remote denial of service and data exposure with updates released.

Reporter	Title	Published	Views	Family All 46
BDU FSTEC	The vulnerability of the microprogrammed software for power meters and energy counters from PowerLogic (ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800) stems from insufficient verification of the authenticity of the requests being executed. This allows attackers to perform inter-site fraudulently.	30 Aug 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controllers lies in the insufficient checking of unusual or exceptional states. This allows a intruder to trigger a malfunction during maintenance.	2 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software for power meters and energy counters from PowerLogic models ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000, PM800 lies in the lack of protection for transmitted data. This allows unauthorized individuals to gain unauthorized access to the protected information.	2 Sep 202100:00	–	bdu_fstec
Circl	CVE-2020-7536	11 Dec 202007:35	–	circl
Circl	CVE-2021-22701	19 Feb 202118:51	–	circl
Circl	CVE-2021-22702	19 Feb 202118:51	–	circl
Circl	CVE-2021-22703	19 Feb 202118:51	–	circl
CNNVD	Schneider Electric Modicon M340 Code Issue Vulnerability	10 Dec 202000:00	–	cnnvd
CNNVD	Schneider PowerLogic Product Information Disclosure Vulnerability	19 Feb 202100:00	–	cnnvd
CNNVD	Schneider PowerLogic Product Information Disclosure Vulnerability	19 Feb 202100:00	–	cnnvd

11 Feb 2021 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

CVSS 27.8

EPSS0.0048

schneider electric denial service data exposure security updates vulnerability fixes equipment vulnerabilities