Lucene search

K
nvd[email protected]NVD:CVE-2022-46680
HistoryMay 22, 2023 - 2:15 p.m.

CVE-2022-46680

2023-05-2214:15:09
CWE-319
web.nvd.nist.gov
5
cwe-319
disclosure of sensitive information
denial of service
modification of data
intercept network traffic

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

46.5%

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could
cause disclosure of sensitive information, denial of service, or modification of data if an attacker
is able to intercept network traffic.

Affected configurations

Nvd
Node
schneider-electricpowerlogic_ion9000Match-
AND
schneider-electricpowerlogic_ion9000_firmwareRange<4.0.0
Node
schneider-electricpowerlogic_ion7400Match-
AND
schneider-electricpowerlogic_ion7400_firmwareRange<4.0.0
Node
schneider-electricpowerlogic_pm8000Match-
AND
schneider-electricpowerlogic_pm8000_firmwareRange<4.0.0
Node
schneider-electricpowerlogic_ion8650Match-
AND
schneider-electricpowerlogic_ion8650_firmwareMatch-
Node
schneider-electricpowerlogic_ion8800Match-
AND
schneider-electricpowerlogic_ion8800_firmwareMatch-
VendorProductVersionCPE
schneider-electricpowerlogic_ion9000-cpe:2.3:h:schneider-electric:powerlogic_ion9000:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion9000_firmware*cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion7400-cpe:2.3:h:schneider-electric:powerlogic_ion7400:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion7400_firmware*cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*
schneider-electricpowerlogic_pm8000-cpe:2.3:h:schneider-electric:powerlogic_pm8000:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_pm8000_firmware*cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion8650-cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion8650_firmware-cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion8800-cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*
schneider-electricpowerlogic_ion8800_firmware-cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

46.5%

Related for NVD:CVE-2022-46680