CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

54 matches found

Prion•added 2021/02/19 4:15 p.m.•19 views

Cross site request forgery (csrf)

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

3.5CVSS4.7AI score0.00324EPSS

SaveExploits0References1Affected Software4

CVE•added 2021/02/19 3:15 p.m.•77 views

CVE-2021-22701

CVE-2021-22701 affects Schneider Electric PowerLogic devices: ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800. The vulnerability is a Cross-Site Request Forgery (CSRF) in the HTTP web interface, enabling an attacker to induce unintended actions on the target device. ...

6.1CVSS4.7AI score0.00324EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2021/02/19 3:15 p.m.•34 views

CVE-2021-22701

5AI score0.00324EPSS

SaveExploits0References1

CVE•added 2021/02/19 3:14 p.m.•58 views

CVE-2021-22703

CVE-2021-22703 affects Schneider Electric PowerLogic devices: ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800. The issue is CWE-319 Cleartext transmission of sensitive information, enabling disclosure of user credentials if an attacker intercepts HTTP traffic between...

7.5CVSS7.3AI score0.00578EPSS

SaveExploits0References1Affected Software1

CVE•added 2021/02/19 3:13 p.m.•53 views

CVE-2021-22702

CVE-2021-22702 affects Schneider Electric PowerLogic devices (ION7400/7650/7700-73xx/83xx-84xx-85xx/8600, ION8650, ION8800, ION9000 and PM800). Root cause: cleartext transmission of sensitive information via Telnet, exposing credentials if an attacker eavesdrops network traffic. Documented impact...

7.5CVSS7.2AI score0.00571EPSS

SaveExploits0References1Affected Software1

Positive Technologies•added 2021/02/19 12:0 a.m.•17 views

PT-2021-15176

Name of the Vulnerable Software and Affected Versions PowerLogic ION7400 affected versions not specified PowerLogic ION7650 affected versions not specified PowerLogic ION83xx/84xx/85xx/8600 affected versions not specified PowerLogic ION8650 affected versions not specified PowerLogic ION8800...

7.5CVSS7.1AI score0.00578EPSS

SaveExploits0References5

CNNVD•added 2021/02/19 12:0 a.m.•7 views

Schneider PowerLogic Product Information Disclosure Vulnerability

Schneider PowerLogic is an industrial control device from Schneider China. Provides increased power factor to improve power quality and troubleshoot power failures to protect networks, devices and operators. An information disclosure vulnerability exists in multiple Schneider PowerLogic products...

7.5CVSS7.1AI score0.00571EPSS

SaveExploits0References2