Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters Cleartext Transmission of Sensitive Information (CVE-2022-46680)

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic. This plugin only works with Tenable.ot. Please visit...

CVE-2022-46680

creationtimestamp| type| source ---|---|--- 2023-05-22 23:43:59+00:00| seen| https://t.me/cibsecurity/64538 2023-06-21 07:15:26+00:00| seen| Telegram/i7lHWW0DSQ8tHro8GhLuMeTvKI3qLEifcH0YA7-qzimxk...

CVE-2022-46680

CVE-2022-46680 affects Schneider Electric PowerLogic ION7000/ION9000 family devices (ION9000, ION7400; PM8000; ION8650, ION8800) with the vulnerability described as Cleartext Transmission of Sensitive Information (CWE-319). Root cause: sensitive data can be transmitted in cleartext over the ION/T...

CVE-2022-46680

A CWE-319: Cleartext transmission of sensitive information vulnerability exists that could cause disclosure of sensitive information, denial of service, or modification of data if an attacker is able to intercept network traffic...

CVE-2021-46680

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680 Vulnerability XSS in module form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680 Vulnerability XSS in module form name field

A XSS vulnerability exist in Pandora FMS version 756 and below, that allows an attacker to perform javascript code executions via the module form name field...

CVE-2021-46680

CVE-2021-46680 affects Pandora FMS versions prior to 756 (i.e., 756 and earlier). The vulnerability is a cross-site scripting (XSS) flaw in the module form name field, enabling an attacker to execute JavaScript in the context of the affected web interface. Reported across multiple sources (NVD en...