Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this...

Researchers Expose New Severe Flaws in Wago and Schneider Electric OT Products

Three security vulnerabilities have been disclosed in operational technology OT products from Wago and Schneider Electric. The flaws, per Forescout, are part of a broader set of shortcomings collectively called OT:ICEFALL, which now comprises a total of 61 issues spanning 13 different vendors...

Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters Cleartext Transmission of Sensitive Information (CVE-2022-46680)

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic. This plugin only works with Tenable.ot. Please visit...

CVE-2022-46680

creationtimestamp| type| source ---|---|--- 2023-05-22 23:43:59+00:00| seen| https://t.me/cibsecurity/64538 2023-06-21 07:15:26+00:00| seen| Telegram/i7lHWW0DSQ8tHro8GhLuMeTvKI3qLEifcH0YA7-qzimxk...

CVE-2022-46680

CVE-2022-46680 affects Schneider Electric PowerLogic ION7000/ION9000 family devices (ION9000, ION7400; PM8000; ION8650, ION8800) with the vulnerability described as Cleartext Transmission of Sensitive Information (CWE-319). Root cause: sensitive data can be transmitted in cleartext over the ION/T...

CVE-2022-46680

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic...

CVE-2021-46680

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680 Vulnerability XSS in module form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680 Vulnerability XSS in module form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680

CVE-2021-46680 affects Pandora FMS versions prior to 756 (i.e., 756 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in the module form name field, enabling an attacker to execute JavaScript in the context of the affected web interface. Reported across multiple sources (NVD en...